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Independent  Orbiter  Assessment 
Analysis  of  the  Orbital  Maneuvering  System 


1 . 0 EXECUTIVE  SUMMARY 

The  McDonnell  Douglas  Astronautics  Company  (MDAC)  was  selected  in 
June  1986  to  perform  an  Independent  Orbiter  Assessment  (lOA)  of 
the  Failure  Modes  and  Effects  Analysis  (FMEA)  and  Critical  Items 
List  (CIL) . Direction  was  given  by  the  STS  Orbiter  and  GF 
Proiects  Office  to  perform  the  hardware  analysis  using  the 
iLtructions  and  ground  rules  defined 

for  Preparation  of  FMEA  ^ CIL,  10  October  19_^.  The^IOA 
i^roach  features  a top-down  analysis  of  the  hardware  to 
determine  failure  modes,  criticality,  and  potential  cr  . ^u«=>h 

items.  To  preserve  independence,  this  analysis  was  accomplished 
without  reliance  upon  the  results  contained  within  the  NASA 
FMEA/CIL  documentation.  This  report  documents  (Appendix  C) 
independent  analysis  results  for  the  Orbital  Maneuvering  System 

(OMS)  hardware. 

Although  the  OMS  and  aft  Reaction  Control  System  (RCS)  are  housed 
in  the  same  pod,  this  report  only  addresses  the  OMS.  The  aft  RC 
report  addresses  the  analysis  of  the  RCS  separately. 

The  OMS  provides  the  thrust  to  perform  orbit  insertion  orbit 
circularization,  orbit  transfer,  rendezvous,  and  deorbit.  The 
OMS  is  housed  in  two  independent  pods  located  one  on  each  side  of 
the  tail  and  consists  of  the  following  subsystems: 

o Helium  Pressurization 
o Propellant  Storage  and  Distribution 
o Orbital  Maneuvering  Engine 

o Electrical  Power  Distribution  and  Control 

The  lOA  analysis  process  utilized  available  OMS  hardware  drawings 
and  schematics  for  defining  hardware  assemblies,  components,  an 
hardware  items.  Each  level  of  hardware  was  evaluated  and 
analyzed  for  possible  failure  modes  and  effects.  Criticality 
was  assigned  based  upon  the  severity  of  the  effect  for  each 
failure  mode. 

Figure  1 presents  a summary  of  the  failure  criticalities  for  each 
of  the  four  subsystems  of  the  OMS.  A summary  of  the  number  of 
failure  modes,  by  criticality,  is  also  presented  below  with 
Hardware  (HW)  criticality  first  and  Functional  (F)  criticali  y 

second . 
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Figure  1 - QMS  OVERVIEW  ANALYSIS  SUMMARY 
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I Summary  of  lOA  Failure  Modes  By  Criticality  (HW/F) 


Criticality : 

1/1 

2/lR 

2/2 

3/lR 

3/2R 

3/3 

TOTAL 

Number  : 

54 

150 

9 

139 

325 

274 

951 

For  each  failure  mode  identified,  the  criticality  and  redundancy 
screens  were  examined  to  identify  critical  items.  A summary  of 
Potential  Critical  Items  (PCIs)  is  presented  as  follows: 


H 

I Summary  of  lOA  Potential  Critical  Items  (HW/F)  I 


Criticality : 

1/1 

2/lR 

2/2 

3/lR 

3/2R 

TOTAL 

Number  : 

54 

150 

9 

44 

119 

376 

Of  the  951  failure  modes  analyzed,  376  were  determined  to  be  PCIs. 
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2.0  INTRODUCTION 


2.1  Purpose 

The  51-L  Challenger  accident  prompted  the  NASA  to  readdress 
safety  policies,  concepts,  and  rationale  being  used  in  the 
National  Space  Transportation  System  (NSTS).  The  NSTS  Office  has 
undertaken  the  task  of  reevaluating  the  FMEA/CIL  for  the  Space 
Shuttle  design.  The  MDAC  is  providing  an  independent  assessment 
of  the  Orbiter  FMEA/CIL  for  completeness  and  technical  accuracy. 


2 . 2  Scope 

The  scope  of  the  independent  FMEA/CIL  assessment  activity 
encompasses  those  Shuttle  Orbiter  subsystems  and  GFE  hardware 
identified  in  the  Space  Shuttle  Independent  FMEA/CIL  Assessment 
Contractor  Statement  of  Work.  Each  subsystem  analysis  addresses 
hardware,  functions,  internal  and  external  interfaces,  and 
operational  requirements  for  all  mission  phases. 


2.3  Analysis  Approach 

The  independent  analysis  approach  is  a top-down  analysis  utiliz- 
ing available  drawings,  schematics  and  documents  to  breakdown  the 
respective  subsystem  into  components  and  low-level  hardware 
items.  Each  hardware  item  is  evaluated  for  failure  mode, 
effects,  and  criticality.  These  data  are  documented  in  the 
respective  subsystem  analysis  report,  and  are  used  to  assess  the 
NASA  and  Prime  Contractor  FMEA/CIL  reevaluation  results.  The  lOA 
analysis  approach  is  summarized  in  the  following  Steps  1.0 
through  3.0.  Step  4.0  summarizes  the  assessment  of  the  NASA  and 
Prime  Contractor  FMEAs/CILs  that  is  to  be  performed  and 
documented  at  a later  date. 


Step  1.0  Subsystem  familiarization 

1.1  Define  subsystem  functions 

1.2  Define  subsystem  components 

1.3  Define  subsystem  specific  ground  rules  and 
assumptions 

Step  2.0  Define  subsystem  analysis  diagram 

2.1  Define  subsystem 

2.2  Define  major  assemblies 

2 . 3 Develop  detailed  subsystem  representations 

Step  3.0  Failure  events  definition 

3.1  Construct  matrix  of  failure  modes 

3.2  Document  lOA  analysis  results 
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step  4.0  Compare  lOA  analysis  data  to  NASA  FMEA/CIL 

4.1  Resolve  differences 

4.2  Review  in-house 

4.3  Document  assessment  issues 

4.4  Forward  findings  to  Project  Manager 


2.4  QMS  Ground  Rules  and  Assumptions 

The  QMS  ground  rules  and  assumptions  used  in  the  lOA  are  defined 
in  Appendix  B.  The  subsystem  specific  ground  rules  were  defined 
to  provide  necessary  additions  and  clarifications  to  the  ground 
rules  and  assumptions  contained  in  NSTS  22206 . 


5 


3.0  SUBSYSTEM  DESCRIPTION 

3.1  Design  and  Function 

2)  provides  propulsive 
Tho  OMQ  orbit  insertion,  on-orbit  translations,  and  deorbit 

the  tail^^  The^OMs"nl?v either  side  if 
hydraslni 

provide  a total  delta  v capability  of  up  to  1000  ft/JihS  6ms 

aborts  to  dump  OMS  propellants.  Pi™r!s  f 
and  4 present  an  overview  of  the  OMS  breakdown  hierarch?  and 
Figure  5 presents  the  OMS  schematic.  ^ 

comprised  of  the 

o Helium  Pressurization 
o Propellant  Storage  and  Distribution 
o Orbital  Maneuvering  Engine 
o Electrical  Power  Distribution  and  Control 

3.1.1  Helium  Pressurization  Subsystem 

The  helium  pressurization  subsystem  is  used  to  maintain 
pressure  In  the  propellant  tanL  to  feed  propluaSs  tS  the 
OMS  engines.  The  subsystem  consists  of  a helium  tank  two 
helium  pressurization  valves,  two  dual  pressure  recailal-nr 

ibolatloreilv«/I®SiL"°' 

^ check  valve  assembly,  and  couplings.  A 
is  shown'"ln''plJ^?e°6.''‘’®  pressurization  subsystem 

3. 1.1.  a Helium  Tanks 

Each  pod  contains  one  helium  supply  tank  for  the 
purpose  of  pressurizing  the  oxidizer  and  fuel  tanks. 

he  helium  supply  tank  is  a spherical  pressure  vessel 
consisting  of  a titanium  line?  with  a fibe?g^Lr 

overwrap.  The  maximum  diameter  of  the  tank 
inches  producing  a usable  volume  of  17  03 

?o?  operating  pressure  ranges  from  a 

low  of  460  psia  to  a maximum  of  4800  psia. 

3.1.1. b  Helium  Isolation  Valves 

The  helium  isolation  valves  (Figure  7)  are  continuous- 
duty  solenoid-operated  valves.  The  valves  are 

PRESS /VAPn?^??nf^'^  spring-loaded  closed.  The  OMS  HE 
RESS /VAPOR  ISOL  switches  on  Panel  08  permit  automatic 
or  manual  control  of  the  valves.  With  the  Lit chSri? 

LJ  Computer  (GPC)  position,  the  valLs 

are  automatically  controlled  by  the  GPC  during  an 
engine  firing  sequence.  The  valves  are  cont??ll2d 
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ORBITAL  MANEUVERING  SYSTEM 
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Figure  2 - ORBITAL  MANEUVERING  SYSTEM  OVERVIEW 
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Figure  4 - OMS  EPD&C  BREAKDOWN  HIERARCHY 
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Figure  5 - OMS  SCHEMATIC 
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Figure  6 - HELIUM  PRESSURIZATION  SUBSYSTEM 


Figure  7 - HELIUM  ISOLATION  VALVE 
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MAIN  SEAL  & SEAT 


manually  by  placing  the  switches  in  the  OPEN  or  CLOSE 
position.  Each  valve  contains  a position  feedback  that 
is  sent  to  the  GPC  for  display  on  the  Cathode  Ray  Tubes 
(CRTs)  . 

3.1.1. C  Helium  Pressure  Regulator  Assemblies 

Pressure  regulation  is  accomplished  by  two  pressure- 
regulating assemblies,  one  downstream  of  each  helium 
tank  isolation  valve.  Each  assembly  contains  a primary 
and  secondary  regulator  in  series,  and  a flow  limiter 
(Figure  8).  The  primary  regulator  is  normally  the 
controlling  regulator.  The  secondary  regulator  is 
normally  open  and  will  not  become  the  controlling 
regulator  until  the  primary  regulator  allows  a higher 
pressure  than  normal.  The  flow  limiter  allows  a 
minimum  of  104  scfm  and  a maximum  of  304  scfm.  All 
regulator  pressures  are  in  reference  to  a bellows 
assembly  that  is  vented  to  ambient  (Figure  8). 

Outlet  Press  Primary  Secondary 

o Normal  flow  (0  to  265  scfm)  255+7-4  psig  262+7-4  psig 
o High  flow  (304  scfm)  245  psig  min.  252  psig  min. 

o Lockup  264  psig  271  psig 

3.1.1. d  Vapor  Isolation  Valves 

These  valves  are  low-pressure,  two-position,  two-way, 
solenoid-operated  valves  (Figure  9).  The  valves  are 
energized  open  and  spring-loaded  closed.  These  valves 
are  used  to  isolate  the  helium  system  and  fuel  tank 
from  the  oxidizer  tank. 

These  valves  can  be  commanded  manually  or  by  the  GPC 
depending  on  the  position  of  the  HE  PRESS7VAPOR  ISOL 
switches  on  Panel  08.  Either  of  the  two  (A  or  B) 

switches  in  the  OPEN  position  energize  both  VAPOR  ISOL 

valves  to  the  open  position.  With  the  switches  in  GPC 
or  CLOSE  positions  the  GPC  is  allowed  to  open  or  close 
the  valves  automatically. 

3.1.1. e  Quad  Check  Valve 

The  check  valve  unit  is  mounted  between  the  regulators 
and  the  propellant  tank  to  pass  ullage  pressure  demand 
flow  downstream  and  to  preclude  upstream  backflow  of 
helium  and  propellant  vapors,  or  liquids.  Each  unit 
consists  of  four  check  valve  elements  arranged  as  two 
parallel  assemblies  of  two  series  check  valve  elements 
(Figure  10).  External  test7checkout  ports  allow 
functional  checkout  without  disassembly  of  the  unit. 
Filter  elements  are  located  at  unit's  inlet  and  test 
ports . 
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Figure  8 HELIUM  PRESSURE  REGULATOR  ASSEMBLY 
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Figure  10  - QUAD  CHECK  VALVE 
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3.1.2  Propellant  Storage  and  Distribution  Subsystem 

This  subsystem  consists  of  one  fuel  and  one  oxidizer  tank, 
tank  and  crossfeed  isolation  valves,  pressure  relief 
assembly,  manual  isolation  valve,  corresponding  feedlines, 
and  couplings.  The  subsystem  is  capable  of  several 
propellant  feed  configurations.  These  include  nominal  QMS 
feed,  QMS  crossfeed,  OMS/RCS  interconnect  and  mixed 
crossfeed.  The  QMS  engines  can  be  operated  individually 
using  propellant  from  either  pod.  All  valves  can  be 
controlled  manually  by  switches  located  in  the  forward 
flight  deck,  with  GPC  software  sequences  or  GPC  memory  write 
procedures.  A schematic  of  the  QMS  propellant  storage  and 
distribution  subsystem  is  shown  in  Figure  11. 

3. 1.2.  a Propellant  Tanks 

The  propellant  supply  is  contained  in  domed,  cylindrical 
titanium  tanks  within  the  QMS  pod.  The  forward  and  aft 
sections  of  each  tank  has  a fluid  volume  of  63  and  27 
cubic  feet,  respectively. 

The  tank  operating  pressure  is  250  psia  with  a maximum 
operating  pressure  of  313  psia.  The  propellant  tanks 
contain  the  propellant  gaging  and  the  propellant 
acquisition  and  retention  assemblies. 

3. 1.2.  a. 1 Propellant  Acquisition  and  Retention  Assembly 

Each  propellant  tank  is  divided  into  two  compartments: 
forward  and  aft.  The  propellant  acquisition  and 
retention  assembly  (Figure  12)  is  located  in  the  aft 
compartment  and  consists  of  a communication  screen  and 
a trap  reservoir. 

The  communication  screen  allows  propellant  flow  while 
preventing  helium  gas  from  crossing  through  the  screen, 
and  retains  propellant  in  the  aft  compartment  during 
zero  g. 

The  trap  reservoir  contains  four  stub  galleries  and  a 
collector  manifold.  The  stub  galleries  acquire 
wallbound  propellant  at  QMS  startup.  The  stub 
galleries  also  have  screens  which  allow  propellant  flow 
while  preventing  gas  ingestion.  The  collector  manifold 
is  connected  to  the  four  stub  galleries  and  contains  a 
gas  arrester  screen  to  further  prevent  gas  ingestion. 

3 . 1 . 2 .  a . 2 QMS  Gaging 

A capacitance  system  is  used  to  measure  the  amount  of 
propellant  in  the  QMS  tanks.  The  system  consists  of 
forward  and  aft  capacitance  probes  and  an  electronic 
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Figure  12  - PROPELLANT  TANKS  WITH  ASSEMBLIES 
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totalizer.  Propellant  quantities  are  updated  onlv 

between  two  concentric  tubes.  Fuel  is  a conductor  SL 
one  capacitor  plate;  the  other  plate  is  the  inner 
tube  of  the  probe,  which  is  a glass  tube  with  a 

coating  on  the  inside.  The  oxidizer 

capacitor  plates  are  the  outer 
and  inner  nickel  tubes  of  the  probe.  ^ 

region  exists  between  the  top  of  the 
bulkhead  screen  and  the  bottom  of  the  forwLd  proL 
This  represents  the  tank  quantity  between  30  percent 

integration  routlne  Ssing'^tarrUme 

t preset  flowrate  is  used  by  the  totalizer  to 
update  the  quantity  of  this  region. 

~ ^Su  probe  measures  the 

tnl  gas  Se?"dflfuslr'ncrlen""“’^"""*"°'’  ^as  inlet. 'and 

Fho  probe  measures  the  propellant  below 

the  bulkhead  screen.  The  aft  probe  consist!  of  th^ 

electronics'^^^^'^^^^^^^  probes  and  the  probe 

- The  totalizer  receives  inputs  from  the 

^r,So?i  gaging  program  calculates  the  OMS 

?n?llco“eot"SpeSt“L?“  P°" 

3.1.2.b  Pressure  Relief  Valves 

The  pressure  relief  valve  is  located  uostream  of  4-ho 

check^i!lve!^^^?h*^'^^  downstream  of  the  helium  quad 
check  valves.  The  pressure  relief  valve  (Piqure  13) 

consists  of  a relief  valve,  burst  diaphra^"^!!  a ^ 

In  the  event  excessive  helium  and/or  propellant  vaoor 
pressure  ruptures  the  burst  diaphragm;  the  relief  ?!lve 
opens  and  vents  the  system.  The  relik  valve  wm  ® 
Close  and  reseal  after  the  excessive  pressure  has 
nsturned  to  the  operating  level. 
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Figure  13  - PRESSURE  RELIEF  VALVE 
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The  burst  diaphragm  provides  a more  positive  seal  of 
helium  than  a relief  valve.  The  filter  prevents  any 
fragments  from  the  nonfragmentation  type  diaphragm  from 
entering  the  relief  valve  seat.  irom 

The  diaphragm  nipture  pressure  is  305+/-8  psig.  The 
relief  valve  will  open  at  a minimum  of  291  psig  and  a 

maximum  of  307  psig.  The  minimum  reseat  pressure  is 
psxg« 

3.1.2. C  Propellant  Feed  and  Interconnect  Lines 

lines  connect  each  of  the  left  and 
right  pod’s  propellant  tanks  to  their  corresponding 

^1*?  tropfeed  lines  are  connected  to  the  feed 
lines  to  allow  the  crossfeeding  of  propellant  from  one 
pod  s propellant  tanks  to  the  other  pod’s  engine 
Furthermore,  the  OMS  propellant  interconnect  lin4s  are 
connected  to  the  RCS  crossfeed  lines  to  feed  propellant 
from  either  OMS  pod's  tanks  to  the  RCS  aft  jets?^ 

3.1.2. d  Tank  Isolation  and  Crossfeed  Valves 

motor  operated  with  bistable  ball 
type  flow  control  (Figure  14).  They  serve  to  isolate 

^he  ^®®^  crossfeed  llSeS. 

2h  control  of  the  valves.  Wi?S 

the  switch  in  the  GPC  position,  the  valves  can  be 
automatically  controlled  by  the  computers.  The  valves 

OpL^SSsition'^aTf^^f^^^  placing  the  switches  in  the 
S™  position  allowing  an  electric  signal  to  provide 

power  to  the  ac  motors  to  open  the  valves.  With  the 
switches  in  the  CLOSE  position  a signal  is  sent  to 
allow  power  to  the  ac  motor  to  drive  the  valves  closed. 

The  ac  motor  valve  operates  on  115  volt  ac,  400  Hz 
thr®e  phase  power  but  will  operate  with  only  two  phases 
uti[?S^?fl^*  microswitch  position  indicators 

power  to  generate  the  open  and  close 
position  discretes.  The  valves  are  activated  by  logic 
circuits  in  the  Orbiter  Motor  Control  Assemblies 
Valves  may  be  moved  by  manual  or  GPC  command. 

A valve  will  operate  when  ac  power  to  the  motor  is 
turned  on  by  a set  of  relays  in  the  MCA  logic.  The 
high  rpm  input  of  the  ac  motor  is  stepped  down  by  the 
planetary  pars  to  turn  a semicircular  gear  sectL  (not 
shown).  The  gear  sector  in  turn  drives  the 
pak®/putch  (rpker  assembly)  on  the  top  of  the  valve 
psembly.  The  brake/clutch  turns  a torsion  rod  which 
is  connpted  to  an  actuator  finger.  The  actuator 
the  device  that  moves  the  valve  ball. 
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Figure  14  - TANK  AND  CROSSFEED  ISOLATION  VALVE 
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When  the  valve  drives  to  the  command  position,  cams  on 
the  bottom  of  the  semicircular  gear  sector  activate 
microswitch  position  indicators.  These  discretes  are 
fed  back  to  the  MCA  logic  to  remove  power  from  the  valve 
within  50  msec  after  reaching  the  commanded  position. 

The  actuation  time  for  a valve  is  from  l.i  to  1.3 
seconds  for  three-phase  operation  and  approximately  l . 5 
seconds  for  two-phase  operation.  Propellant  flow 
through  the  valve  is  established  within  0.5  seconds  of 
the  first  valve  motion. 

3.1.2.e  Manual  Isolation  Valve 

The  ground  manual  isolation  valve  is  used  to  isolate 
the  propellant  tank  from  the  helium  pressurization 
subsystem  for  ground  operations.  The  nonpowered  valve 
can  only  be  opened  with  a special  tool  which  cannot  be 
detached  with  the  valve  in  the  closed  position.  Open 
during  all  flight  phases,  the  valve  has  redundant  seals 
to  external  leak  paths  (Figure  15). 

3.1.3  Orbital  Maneuvering  Engine  Subsystem 

The  OMS  engine  is  a pressure  fed,  hypergolic  reacting 
bipropellant,  regenerative-cooled,  fixed  thrust  rocket 
engine.  The  engine  can  be  gimbaled  to  provide  thrust  vector 
control  (TVC).  Major  assemblies  are  the  GN2  (pneumatic), 
bipropellant  ball  valves,  injector,  combustion  chamber, 
nozzle  extension,  engine  purge  valve,  fuel/oxidizer  lines 
coupling  and  gimbal  system  (Figure  16).  Two  OMS  engines 
are  installed  on  the  Orbiter  vehicle,  one  per  pod. 

Engine  operation  is  controlled  via  GPC  software  sequences. 
Ignition  is  commanded  only  after  specific  crew  system  con- 
figuptions  (switch  positions  and  CRT  inputs)  have  been 
completed.  However,  shutdown  can  be  commanded  manually  at 
any  time  during  a burn.  Crew/flight  controller  insight  into 
engine  operation  is  via  pressure,  temperature,  and  valve 
position  instrumentation  provided  with  the  engine. 

3. 1.3. a Gaseous  Nitrogen  (GN2)  Assembly 

The  purpose  of  the  OMS  GN2  (pneumatic)  assembly  is  to 
store  pressurized  nitrogen  gas  and  supply  on  command 
regulated  GN2  to  actuate  the  bipropellant  ball  valves 
and  purge  the  fuel  side  of  the  injector  assembly. 

Also,  sufficient  regulated  GN2  is  stored  in  an 
accumulator  for  a minimum  of  one  engine  start. 

The  GN2  assembly  consists  of  a fill  and  vent  valve, 
storage  tank,  engine  pressurization  valve,  check  valve 
pressure  regulator,  relief  valve,  accumulator,  and 
associated  instrumentation  (Figures  17  and  18). 
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3.1. 3. a. 1 Fill  and  Vent  Valve 


The  fill  and  vent  valve  is  a two-way,  high-pressure 
coaxial,  single  solenoid-operated  valve  (Fi^re  19)* 

The  valve  is  used  only  during  ground  operations  to 
pressurize  or  vent  the  GN2  (pneumatic)  assembly.  There 
is  no  elGctrical  power  to  the  solenoid  coil  during 
flight.  The  valve  is  designed  to  fail  closed  via  an 
internal  spring.  During  fill  operations  the  GN2  is 
filtered  through  sintered  stainless  steel  wire  filters 
at  the  inlet  and  outlet  ports.  The  valve  is  bolted 
directly  to  the  GN2  storage  tank.  There  is  no 
instrumentation  on  this  valve. 


3.1. 3. a. 2 Storage  Tank 

The  GN2  storage  tank  is  a fracture-critical  component . 
The  tank  is  manufactured  from  titanium  bar  stock  in  two 
halves,  then  welded  together.  One  half  incorporates 
the  mounting  flange  for  the  fill  and  vent  valve.  The 
second  half  incorporates  the  mounting  flanges  and  pow 
passages  for  the  remaining  GN2  components.  Initial  GN2 
loading  is  0.43  pounds  at  3000  psia  and  70  degrees  F. 
Nominally,  this  loading  will  supply  17  engine 
start/purge  cycles,  instrumentation  consists  of  two 
g-j-]»gln  gage— type  pressure  transducers,  which  can  be 
monitored  on  CRT  display  "GNC  SYS  SUMM  2"  and  the 
cockpit  dedicated  meter  "OMS  PRESS  N2/He"  on  Panel  F7 . 
The  tank  pressure  transducer  designated  PI  is  hardwired 
to  this  meter.  The  transducer  outputs  are  limit  sensed 
in  the  PASS  (OPS  2 and  8)  and  the  BFS  (OPS  l,  3,  and  6 ) 
and  will  trigger  an  SM  alarm  (class  3)  if  one  or  both 
go  out  of  limits.  These  pressures  are  included  in  the 
Guidance,  Navigation,  and  Control  (GNC)  downlist  for 
ground  monitoring. 

3. 1.3. a. 3 Engine  Pressurization  Valve 

The  OMS  engine  pressurization  (PRESS)  valve  ^ 
wav,  high-pressure,  dual  solenoid-operated  shutoff 
valve.  The  purpose  of  this  valve  is  to  start  and  stop 
the  flow  of  GN2  in  the  pneumatic  actuation  system.  The 
valve  will  open  with  the  application  of  electrical  power 
(23-28  V dc)  and  only  one  solenoid  is  required  for 
nominal  operation.  With  the  loss  of  electrical  power 
the  valve  is  designed  to  fail  closed  via  an  internal 
spring.  During  GN2  flow  conditions,  the  gas  is 
filtered  through  a sintered  stainless  steel  wire  filter 
at  the  inlet  port,  instrumentation  consists  of  a leaf 
spring  switch,  which  is  activated  by  a push  rod 
integral  to  the  valve  poppet  assembly.  Closure  of  the 
switch  completes  an  electrical  circuit  to  indicate  an 
open  valve.  Valve  open/closed  status  can  be  monitored 
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Figure  19  - GN2  PILL  AND  VENT  VALVE 
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on  CRT  display  "GNC  SYS  SUMM  2"  in  the  PASS  (OPS  2 and 
8)  and  BPS  (OPS  1,  3,  and  6).  The  switch's  open/closed 
status  is  in  the  GNC  downlist  and  is  available  for 
ground  monitoring. 


The  engine  pressurization  valve  is  not  controlled  by 
the  GPC  software.  Activation  of  the  valve  can  only  be 
accomplished  by  manual  control  of  the  "OMS  ENG"  switch 
on  cockpit  Panel  C3 . Placing  the  "OMS  ENG"  switch  in 
the  "ARM/PRESS"  position  will  open  the  "ENG  PRESS  VLV" 
and  allow  GPC  software  to  activate  the  engine  control 
valves  for  a burn,  open  the  purge  valves  at  burn 
completion,  and  repressurize  the  GN2  accumulator . With 
the  "OMS  ENG"  switch  in  the  "ARM"  position  the  software 
will  inhibit  opening  of  the  purge  valves. 


3. 1.3. a. 4 Pressure  Regulator/Relief  Valve 

The  GN2  pressure  regulator  is  a modulating, 
pressure  reducing,  direct  acting  pressure-operated 
mechanical  regulator  with  an  integral  pressure  operated 
relief  valve.  The  purpose  of  the  regulator  is  to  reduce 
high  upstream  GN2  tank  pressure  (470  to  3000  psig)  to 
the  downstream  nominal  on-orbit  ball  valve  actuator 
pressure  (310  +/-  10  psig).  If  downstream  pressure 
does  increase,  (at  360  psig  maximum)  the  regulator  will 
lock  up  stopping  GN2  back— flow.  If  the  regulator 
fails  open  or  if  downstream  pressure  rises  to  450  psig, 
the  integral  relief  valve  will  open  to  vent  GN2.  At 
400  psig  the  relief  valve  will  reseat  to  stop  venting. 
During  active  GN2  flow  the  gas  is  filtered  through  a 
sintered  stainless  steel  wire  filter  at  the  inlet  port. 
There  is  no  instrumentation  on  this  device.  However, 
actual  operation  can  be  inferred  from  the  GN2  stcprage 
tank  and  reservoir  outlet  pressures.  The  operating 
pressure  levels  of  the  regulator  and  relief  valve  may 
be  mechanically  reset. 


3. 1.3. a. 5 Check  Valve 

The  GN2  check  valve  is  a one-way  flow,  cartridge  type 
valve.  The  purpose  of  this  valve  is  to  prevent  GN2 
accumulator  back  flow  from  occurring  if  a leak  occurs 
upstream  of  the  check  valve.  The  valve  is  held  close 
by  a mechanical  spring  and  will  open  with  a pressure  6 
psig  above  the  downstream  level.  Reseat  pressure  is  l 
psig  delta  across  the  valve.  There  is  no 
instrumentation  associated  with  this  component. 


3. 1.3. a. 6 GN2  Reservoir 

The  GN2  reservoir  (accumulator)  is  a fracture-critical 
component  manufactured  from  titanixam  bar  stock. 
Manufacturing  is  done  in  two  halves , Which  are  welded 
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together.  The  assembly  is  then  bolted  to  a mount ina 
flange,  which  is  part  of  the  GN2  storage  tank.  The^ 
reservoir  nominally  holds  about  0.0008  pounds  of  GN2  at 
po  psia  and  70  degrees  F.  This  quantity  is  enough  to 

^^nlist^of  oie^^Str  engine  start.  Instrumentation 

u 9^9e-type  pressure  transducer 

measurement  is  titled  "GN2  REG  P" 

the  pLs°?OPs''2'^aed  2"  in 

tne  PASS  (OPS  2 and  8)  and  BPS  (OPS  1,  3,  and  6)  Thicr 

pressure  is  also  limit  sensed  and  will  trigger  an  SM 

limits.  ^Inc  dSwnnst 

availablef^^^^^^'  ground  monitoring,  is  also 
3. 1.3. a. 7 Engine  Control  Valve 

control  valve  is  a three-way,  two-position 
ual  solenoid-operated  valve  (Figure  20).  The  valve  is 

ScSJSio^  bipropellllJt  valie  pneuml?lc 

?23  37  5 ^ receipt  of  electrical  power 

dc)  redundant  solenoids  in  tandem  will  open 

into'^the^actiato?^  pressure  regulated^GN2 

' '^®fl®cting  a piston  and  opening  the 

bi  In  inte^lill®’  is  accomplished  Lchanically 

Under  flow  conditions  the  GN2^ 
fT.  T a sintered  stainless  steel  wire 

filter  located  in  the  inlet  port.  The  valve  is  bolted 
to  an  integral  attach  flange  on  the  actultl?  Ilsemblf 
Purge  of  pressurized  GN2  from  the  valve  and  the  ^ 

during  the  close  cycle, 

Instr^®ntation  for  the  control  valve  is  a leaf  sprino 
switch.  Activation  is  by  a push  rod,  which  is  an  ^ 
integral  part  of  the  valve  poppet  assembly.  Desian  and 
^^®  switch  is  identical  to  the  "ENG  PRESS 
is  «ot  monitorld  in  thf 

cockpit  but  IS  in  the  01  downlist  for  ground  monitoring. 

3. 1.3. a. 8 Actuator 

The  bipropellant  ball  valve  actuator  is  a pneumatically 
operated  rack  for  opening  the  fuel  and  oxidiSr  bill  ^ 
valves  (Figure  21).  The  actuator  is  mechanically 
closed  via  internal  spring  forces.  Comprising  the 
assembly  are  an  actuation  piston/cylinder,  a toothed 
rack  for  mating  with  the  ball  valve  pinion,  closure 

(LVDT?®'  ?Se  Transformer 

a®  is  calibrated  to  show  the  percentaap 

of  ball  valve  rotation  as  a function  of  the  rack's 

thr"ONC°SYs“siiMS“o?“I'  °5v,“®  ^ monitored  on 

(OPS  ? ^ mi"  **'!  2 and  8)  and  BPS 

dn^nih^^^^  ^ output  is  also  in  the  GNC 

downlist  for  ground  monitoring. 
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Figure  20  - ENGINE  CONTROL  VALVE 
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Figure  21  - ACTUATOR  ASSEMBLY  CROSS  SECTION 
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3.1. 3.  a. 9 Bipropellant  Ball  Valve  Assembly 

The  bipropellant  ball  valve  was  analyzed  as  part  of  the 
OME  assembly  but  is  discussed  here  for  continuity . The 
OMS  engine  bipropellant  ball  valve  is  a rotating  open/ 
close  flow  valve  used  to  control  the  flow  of  propellant 
to  the  OMS  engine.  The  assembly  consists  of  four 
valves;  pairs  of  fuel  and  oxidizer  valves  in  series. 

Each  pair  is  linked  mechanically  to  its  actuator  via  a 
pinion  that  mates  with  the  actuator  rack.  Valve  pairs 
are  rotated  simultaneously  90  degrees  for  100  percent 
open.  There  is  no  instnimentation  on  these  valves. 
However,  nominal  valve  operation  is  inferred  by  engine 
start,  stop,  and  performance  levels. 

3. 1.3.  a. 10  Engine  Purge  Valve 

The  purpose  of  the  engine  purge  valve  is  to  allow,  on 
command,  the  flow  of  regulated  GN2  into  the  engine's 
fuel  (MMH)  cooling  passages.  The  GN2  purge  is  done, 
nominally  after  every  burn,  to  minimize  the  possibility 
of  fuel  freezing  in  the  internal  cooling  and  injector 
flow  passages.  The  assembly  consists  of  two  valves  in 
series,  a check  valve,  and  instrumentation  for  monitor- 
ing the  open-closed  status  of  the  purge  valves. 

The  purge  valve  is  a two-way  solenoid— operated  shutoff 
valve  (Figure  22).  With  the  application  of  electrical 
power  (23-32  V dc),  the  valve  will  open  to  allow  GN2 
flow.  With  the  removal  of  power,  internal  spring 
forces  will  close  the  valve.  During  the  active  GN2 
flow  conditions  the  gas  is  filtered  through  a sintered 
stainless  steel  wire  filter  at  the  valve  inlet  port. 
Instrumentation  consists  of  a leaf  spring  switch.  The 
switch  is  activated  by  a push  rod  that  is  an  integral 
part  of  the  poppet  assembly.  Closure  of  the  switch 
completes  an  electrical  circuit  to  indicate  an  open 
position.  This  signal  is  part  of  the  GNC  downlist  for 
monitoring  the  valve  position  by  the  ground.  The  purge 
valve  operation  is  not  monitored  in  the  cockpit; 
however,  a purge  operation  can  be  inferred  by 
monitoring  the  "GN2  TK  P",  "GNC  REG  P"  on  GNC  SYS 
SUMM  2,  Pc,  and  injector  temperature  readings. 

Integral  to  the  second  valve  is  a check  valve  of 
identical  design  to  the  check  valve  of  3. 1.3. a. 5. 

Purging  of  the  OMS  engine  fuel  lines,  cooling  passages, 
and  injector  head  is  accomplished  systematically  by  the 
OMS  GPC  firing  sequencer  software.  Nominally  the  OMS 
ENG  switch  is  placed  in  the  "ARM/PRESS"  position  for  a 
burn.  This  action  opens  the  ENG  PRESS  VLV,  repressuriz- 
ing the  GN2  reservoir  and  allowing  the  GPC  to  issue  the 
open  command  to  the  purge  valves  following  the  burn. 
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Figure  22  - PURGE  VALVE  ASSEMBLY  CROSS  SECTION 
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If  the  OMS  ENG  switch  is  placed  in  the  "ARM"  position, 
the  open  commands  are  inhibited  by  the  GPC. 

3 . 1 . 3 .  b OME  Assembly 

The  OME  assembly  consists  of  an  injector,  combustion 
chamber,  nozzle  extension,  and  plumbing.  The  assembly 
feeds  fuel  and  oxidizer  at  the  design  mixture  ratio, 
confines  the  combustion  of  the  propellants,  and  provides 
for  thi6  ©xpsinsion  of  th©  cornbustion  gas©s  to  produc© 
thrust.  There  is  one  OME  assembly  in  each  pod. 

3.1.3. b.l  Injector 

The  OMS  engine  injector  meters,  atomizes,  and  directs 
fuel  and  oxidizer  into  the  combustion  chamber,  at  the 
design  mixture  ratio.  This  produces  efficient  and 
stable  combustion  that  will  provide  the  reguired  thrust 
without  endangering  hardware  durability.  The  injector 
consists  of  an  oxidizer/fuel  manifold,  core,  fuel 
distribution  ring,  platelet  injector,  and  manifold 
covers  (Figure  23) . All  fuel  and  oxidizer  passages  are 
separated  by  parent  metal  or  redundant  metallurgical 
joints . 

All  oxidizer  and  fuel  manifold  passages  are  machined 
into  the  stainless  steel  core  billet.  The  distribution 
ring  mates  with  the  combustion  chamber  regenerative 
cooling  passages  and  delivers  fuel  to  the  fuel 
manifold.  The  injector  is  made  up  of  six  8-mil  thick 
platelet  disks  (one  external,  one  face,  three  metering, 
and  one  orifice).  Each  platelet  hole  pattern  is  photo- 
graphically etched  to  assure  no  metal  chips  or  burns 
remain  in  the  electron  beam  welded  stack.  The  injector 
hole  pattern  consists  of  16  concentric  alternating 
rings  of  oxidizer  and  fuel  orifices.  Ring  16  sprays 
fuel  on  the  combustion  chamber  wall  for  film  cooling. 

The  manifold  covers  incorporate  attachment  bosses  for 
installation  of  instrumentation  (pressure  and 
temperature) . All  are  sealed  off  except  two,  one  for  a 
combustion  chamber  pressure  transducer  and  the  second 
for  a fuel  injector  inlet  temperature  thermocouple. 

The  fuel  injector  inlet  temperature  is  on  "PRPLT 
THERMAL  (DISP  89)"  in  the  PASS  (OPS  2)  and  on  "GNC  SYS 
SLJMM  2"  in  the  BFS  (OPS  1,  3,  and  6).  The  combustion 
chamber  pressure  is  hardwired  to  "OMS  PRESS  PC"  meter 
on  panel  F7  (output  in  percent).  Both  parameters  are 
part  of  the  GNC  downlist  for  ground  monitoring.  The 
fuel  injector  temperature  is  limit  sensed  and  will 
trigger  an  SM  alert  (class  3)  if  it  exceeds  a high  limit. 
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Figure  23  - INJECTOR  ASSEMBLY 
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3.1.3.b.2  Combustion  Chamber 

The  QMS  engine  combustion  chamber  confines  the  hot 
combustion  gases  in  a fixed  volume  producing  the 
reguired  pressure  and  temperature  that  provides  the 
design  thrust.  The  combustion  chamber  consists  of  an 
acoustic  resonator,  inner  and  outer  walls,  nozzle 
throat,  fuel  inlet  distribution  ring,  thrust-gimbal 
ring  mounting  pads,  clevis  mounts  for  attachment  of 
other  assemblies  and  a nozzle  attachment  flange  (Figure 
24).  Fuel  is  used  to  cool  the  assembly  during  engine 
burns  by  regenerative  and  film  cooling  methods . 

One  hundred  twenty  longitudinal  grooves  are  machined 
into  the  combustor ' s stainless  steel  inner  wall . When 
mated  to  the  outer  wall  these  grooves  make  up  the 
regenerative  cooling  passages.  These  passages  are 
aligned  and  mated  to  the  injector  assemblies'  fuel 
distribution  ring  during  final  chamber  assembly.  The 
remaining  part  of  the  regenerative  cooling  system  is 
the  fuel  inlet-distribution  ring,  which  is  an  integral 
part  welded  to  the  outer  wall.  The  nozzle  attachment 
flange  is  an  integral  part  of  the  distribution  ring. 

The  thrust-gimbal  ring  mounting  pads  are  also  welded  to 
the  distribution  ring  while  the  hardware-subsystem 
clevis  mounts  are  welded  to  the  outer  chamber  wall. 

Integral  to  the  inner  wall  of  the  combustion  chamber  is 
the  converging- throat-diverging  (initial)  section  of 
the  engine's  nozzle.  The  converging  section  has  an 
area  ratio  (Ac/At)  of  1.934:1,  which  blends  into  the 
throat  area  (approx.  26.5  square  inches).  The  diverg- 
ing section  is  the  initial  section  of  the  engine's 
bell-shaped  exhaust  nozzle.  The  area  ratio  of  this 
section  is  5.866:1  with  a mean  divergence  angle  of 
about  30.5  degrees. 

3.1.3.b.3  Nozzle  Extension 

The  nozzle  extension,  when  bolted  to  the  combustion 
chamber,  completes  the  engine's  bell-shaped  exhaust 
nozzle  (Figure  25).  It  is  fabricated  from  a columbium 
alloy  sheet  stock.  Nominal  thickness  is  0.030  inch. 
However,  the  attach  flange  is  made  from  0.10  inch  sheet 
and  the  exhaust  plane  stiffener  ring  is  from  0.0775 
inch  sheet.  These  two  sections  are  tapered  to  match 
the  0.030  sheet  at  the  girth  welds.  The  final  assembly 
is  coated  with  a silicide  compound  as  a corrosion 
preventive.  Attachment  to  the  combustion  chamber  is  by 
a split  retainer  ring  with  a graphite  gasket.  Thirty- 
six  bolts  hold  the  extension  in  place. 

The  nozzle  exit  plane  area  is  about  1458  square  inches, 
resulting  in  an  expansion  ration  (Ae/At)  of  55:1.  The 
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Figure  24  - COMBUSTION  CHAMBER  ASSEMBLY 
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Figure  25  - NOZZLE  EXTENSION 


41 


• OVER  20  MIN  CONTINUOUS  FIRING 
CAPABILITY 


degrees,  which  gives 

a radial  thrust  component  of  about  900  pounds 

als'^xlt^Spinr’^f  steady  state  operation,  the  exhaust 
gas  exit  velocity  is  approximately  10,100  ft/sec. 

3 . 1 . 3 . b . 4 Plumbing 

Plumbing  for  the  OMS  engine  is  divided  into  GN2 
(pneumatic),  fuel,  and  oxidizer  lines.  These  lines  arp 

integral®end"fTtWnS!™  incorporating 

welded  to  the  tube  for  attachment  in  the  pro|ellSnt 
feed  lines  and  the  inlet  side  of  the  bipropellant  ball 

hPi’Tn  inlet  lines  also  incorporate 

for  line  flexing  during  gimbal 
?hr?ppS''r  assembly.  At  the  attachment  to 

mtS  ?o  eSc^lLf  ” “<5  filter  are 


oxidizer  are  made  from 

r titanium  alloy  tubing.  End  fittinas  are 

e ed  in  place  for  mating  to  the  bipropellant  ball 

.I.-*"  “ '‘w™"* 

for  the  plumbing  consists  of  strain 
flip!  pressure  transducers  and  thermocouples  on  the 

fuel  and  oxidizer  inlet  lines.  The  pressure 

cockpit  on  "Gnc 

(OPS  1 3 aid  ^ 

in  ^ temperatures  can  be  monitored 

on  'PRPLT  THERMAL  (DISP  89)"  in  SM  OPS 
temperatures  are  pllt  of  ?L 
GNC/OI  downlist  for  ground  monitoring.  The 

are  also  limit  sensed  and  will  trigger  an 
SM  alert  (class  3)  If  the  limits  are  exceeded. 


3.1.3.C 


TVC  ( Gimbal ) Assembly 


Each  OMS  engine  is  attached  to  the  Orbiter  via  a 
?pitch?^and^s?dp’'fi^^iS^^  gimbaled  up-and-down 

26).  Gimbaling  is  driven  by  two 
®®®^  engine  (Figure^27) 

Gimbal  travel  in  the  pitch  and  yaw  axes  is  app?oxi- 
degrees  and  +/-8  degrees,  respectively 
about  the  null.  Since  the  engines  are  mounted  on^' 
opposite  sides  of  the  Orbiter 's  centerline  (X-axis) 
pointing  one  engine  up  and  one  down  produces  a roll"^ 
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THRUST  RING 


Figure  26  - THRUST  RING  TO  TCA  ATTACHMENT 
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POO  STRUCTURE 


Figure  27  - OMS  GIMBAL  ACTUATOR 
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ACTUATOR  ASSEKBLY  FUNCTIONAL  INTERFACE 


moment.  With  both  engines  firing,  coordinated  2-axis 
gimbaling  of  the  two  engines  produces  3-axis  Orbiter 
flight  control.  The  yaw  gimbals  control  only  yaw, 
whereas  the  pitch  gimbaling  produces  both  a pitch  and  a 
roll  moment  together.  3-axis  TVC  control  is  impossible 
with  only  one  engine.  For  a one-engine  OMS  burn,  TVC 
controls  pitch  and  yaw  and  the  RCS  is  used  to  control 
roll.  The  crew  can  read  the  current  engine  gimbal 
pitch  and  yaw  angles  on  the  CRT  XXXX  MNVR  YYYY  display. 
The  pitch  and  yaw  angles  are  included  in  the  01  down- 
list  for  ground  monitoring. 

Each  gimbal  actuator  has  two  channels;  primary  and 
secondary.  If  the  active  channel  stops  running,  the 
other  can  take  over.  Both  channels  operate  at  the  same 
speed,  taking  four  seconds  to  steer  an  engine  through 
its  entire  gimbal  range  at  top  speed.  The  crew  can 
select  actuator  drive  via  the  CRT  XXXX  MNVR  YYYY 
display. 

3.1.4  Electrical  Power  Distribution  and  Control  Subsystems 

3. 1.4.  a Thermal  Control 

Thermal  control  for  the  OMS  is  achieved  by  insulation 
of  propellant  lines  and  walls  that  enclose  OMS  hardware 
components , and  by  line-wraparound  heaters  and  blanket- 
type  heaters.  The  heater  system  is  divided  into  two 
areas:  the  OMS/RCS  pods,  and  the  aft  fuselage  cross- 

feed and  bleed  lines.  Each  of  the  heater  systems  has 
two  redundant  heater  systems,  A and  B,  and  are 
controlled  by  switches  on  Panel  A14. 

3. 1.4.  a. 1 Pod  Thermal  Control 

The  OMS/RCS  pods  use  heater  patches  to  provide  thermal 
control.  Each  heater  patch  consists  of  a redundant  set 
of  wires,  or  elements,  which  have  been  formed  into  a 
flat,  tightly  spiraled  patch.  The  patch  is  then 
mounted  on  existing  hardware,  and  as  electricity  flows 
through  the  highly  resistant  wires,  the  heat  generated 
warms  the  hardware  as  well  as  radiating  into  the 
surrounding  open  areas.  Each  of  the  OMS/RCS  pods  are 
divided  into  nine  heater  areas.  Each  of  the  heater 
patches  in  the  pods  contain  an  A and  a B element. 

Each  element  has  a thermostat  which  controls  the 
temperature  from  55  degrees  to  75  degrees,  +/-5 
degrees  F.  Temperature  sensors  are  located  throughout 
the  pods  and  supply  temperature  information  to  the 
propellant  thermal  CRT  display  and  to  telemetry.  The 
crew  can  monitor  this  display  only  in  SM  OPS  2,  whereas 
the  ground  can  monitor  the  temperature  in  all  OPS. 
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3. 1,4. a. 2 Crossfeed  and  Bleedline  Thermal  Control 

The  aft  fuselage  is  divided  into  eleven  heater  areas. 
Each  is  heated  in  parallel  by  heater  systems  A and 

B,  and  each  areas  has  a control  thermostat  to  maintain 
temperature  at  55  degrees  to  75  degrees,  +/-5  degrees 
F.  Temperature  sensors  are  located  on  the  control 
permostats  and  on  the  crossfeed  and  bleed  lines.  The 
temperature  sensors  supply  temperature  to  the 
propellant  thermal  CRT  display  in  SM  OPS  2,  and  to 
telemetry  to  all  OPS, 

3 . 2 Interfaces  and  Locations 

The  OMS  engine  interfaces  with  the  Shuttle's  Data  Processing 

*-°^®  Modulator  Master  Unit  (PCMMU),  Caution 
and  Warning  System  (C&W),  Displays  and  Controls  (D/C),  and  the 
Electrical  Power  Distribution  and  Control  System  (EPDCS). 

engine  consisting  of  pressures,  temperatures, 
actuator  position,  and  valve  position  are  sent  to  the  DPS  via  the 
Flight  Critical  (FC)  Multiplexer/Demultiplexers  (MDMs)  for 

GPCs.  Display  and  annunciation  of  the  health 
and  status  of  the  engine  is  accomplished  by  the  DPS  via  CRT 
isplays,  cockpit  meters,  C&W,  and  telemetry.  The  DPS  system  in 
turn  provides  the  engine  with  commands  for  valve  configurations 
6ngine  ON/OFF,  and  Thrust  Vector  Control  (TVC) . 

A subset  of  the  engine  data  is  sent  to  the  PCMMU  via  the 

Instrumentation  (01)  MDMs  to  be  telemetered.  The 
these  data  with  other  OMS  parameters,  output  from 
^o®  ?£  ^^®  ‘^ownlist,  and  routes  them  to  the  onboard 

pa?ror?hfdownlS^  transmitted  to  the  ground  as 

processes  these  data  against  present  limits  to  determine 
anomalies  in  engine  performance.  When  anomalies  are  found 

signals  are  issued  that  activate  indicator  lights  in 
C&W  tone^^^^^  master  alarm  pushbuttons  and  turn  on  the 

metep  in  the  D&C  panels  are  used  to  display 
directly  from  the  engine  or  routed^  ^ 

^4?^  GPCs.  The  D&C  panels  also  have  switches  and  circuit 

manual  valve  configuration  and  power 
manual  TVC  mode,  crew  deflection  of  the 
Rotational  Hand  Controller  (RHC)  is  routed  through  the  GPC  for 
scaling  and  then  to  the  engine  gimbal  actuators  to  provide  TVC. 

Electrical  power  is  provided  to  the  engine  by  the  EPDCS.  Logic 

power  and  dc  power  is  provided  to  valve  relays  and  TVC  servo- 
actuators. 


46 


The  OMS  also  interfaces  with  the  aft  RCS  through  propellant 
interconnect  lines.  OMS  propellant  can  be  fed  to  RCS  jets  for 
attitude  holds,  maneuvers,  and  translations  on-orbit,  and  during 
aborts  for  more  rapid  OMS  propellant  dumping.  RCS  propellant  is 
not  fed  to  the  OMS. 

3 . 3 Hierarchy 

Figures  3 and  4 illustrate  the  hierarchy  of  the  OMS  hardware 
components.  Figures  5 through  27  depict  the  functional  details 
of  the  OMS  subsystem  components. 
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4.0  ANALYSIS  RESULTS 


Detailed  analysis  results  for  each  of  the  identified  failures 
in  Appendix  C.  Table  I presents  a summarj  of 

of  the  OMS^  '^Tabl’p^TT^^^^  three  major  hardware  subsystems 

ot  the  QMS.  Table  II  presents  a separate  summary  of  the  failure 

?EPD&r?^i^hr  the  Electrical  Power  Distribution  and  Control 

the  applicable  failure  mode?  ?s  provided  In 

to  hardware  failure  modes  analyzed,  160  were  determined 

to  be  PCIs.  A sugary  of  the  hardware  PCIs  is  presented  in  Table 
II.  Of  the  667  EPD&C  failure  modes  analyzed,  216  were 

in^Table^Iv!'°  ^ summary  of  the  EPD&C  PCIs  is  presented 


Appendix  D contains  a cross  reference  between 
analysis  worksheet  in  Appendix  C. 


each  PCI  and 
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TABLE  II  Summary  of  lOA  Failure  Modes  & Criticalities  (QMS  EPD&C) 


Criticality: 

1/1 

2/lR 

2/2 

3/lR 

3/2R 

3/3 

TOT 

OME  SUBSYSTEM 

CONTROLS 

GN2  ASSEMBLY 

VALVES 

DIODE 

_ 

_ 

Q 

Q 

DRIVER 

-- 

— 

17 

4 

1 

O 

22 

FUSE 

2 

_ 

6 

8 

RESISTOR 

— 

6 



14 

SWITCH,  TOGGLE 

_ 

2 



2 

1 

q 

TVC  ASSEMBLY 

w 

CONTROLLER 



_ 

4 

4 

Q 

FUSE 

— 

— 

_ 

2 

O 

2 

INSTRUMENTATION 

GN2  ASSEMBLY 

SENSOR,  PRESSURE 

_ 

_ 

1 

2 

3 

OME  ASSEMBLY 

FUSE 

- 

— 

_ 



2 

2 

METER 

- 

- 

— 

— 



1 

1 

SENSOR,  POSITION 

— 

— 



2 

2 

SENSOR,  PRESSURE 

_ 

_ 

3 

SENSOR,  TEMPERATURE 

— 

1 

_ 

_ 

3 

4 

TVC  ASSEMBLY 

SENSOR,  POSITION  i 

- 

- 

4 

i 

- 

4 

THERMAL  CONTROL  SUBSYSTEM 

POD 

DRIVER 

22 

22 

44 

FUSE 

- 

- 

— 

32 

32 

HEATER 

- 

- 

58 

6 

64 

RELAY 

- 

4 

_ 

4 

8 

RESISTOR 

- 

- 

— 

12 

16 

28 

SENSOR , TEMPERATURE 

- 

_ 

_ 



12 

SWITCH,  THERMAL 

- 

16 

_ 



16 

32 

SWITCH,  TOGGLE 

2 

_ 

2 

A 

CROSSFEED 

ft 

DRIVER 

- 

— 

_ 



12 

12 

FUSE 

- 

— 

— 

8 

2 

10 

HEATER 

- 

- 

— 

_ 

10 

12 

22 

RELAY 

- 

- 

_ 

_ 

4 

4 

RESISTOR 

— 

_ 



4 

« 

SENSOR,  TEMPERATURE 

_ 

5 

u 

Q 

X ^ 

SWITCH,  THERMAL 

- 

— 



32 

\J 

12 

44 

SWITCH,  TOGGLE 

- 

- 

- 

- 

4 

4 

TOTAL 

- 

63 

8 

91 

308 

197 

667 

— + 


52 


TABLE  III  Sununary  of  lOA  Potential 

Critical  Items  (OMS 

+ 

HW) 

s - - s S S S 3S  s s s = 3 s s a s s s s =3  s s ==  = s s 

======= 

- = - = 

Criticality : 

1/1 

2/lR 

2/2 

3/lR 

3/2R  1 

TOTAL 

S33S33aaaS3S333SaaSS3S333= 

= = = = = 

2 = = = = = 

= = = = = 

11 

II 

II 

It 

tl 

II 

HE  PRESS  SUBSYSTEM 

STORAGE  TANK 

2 

- 

— 

— 

— 

2 

TANK  ISOLATION  VALVE 

1 

2 

— 

2 

— 

5 

REGULATOR 

- 

5 

— 

— 

— 

5 

VAPOR  ISOLATION  VALVE 

1 

2 

- 

2 

— 

5 

QUAD  CHECK  VALVE 

2 

2 

— 

1 

— 

5 

COUPLINGS  (SINGLE  SEAL) 

- 

1 

— 

— 

1 

LINES  AND  FITTINGS 

2 

2 

4 

PROP  STOR  & DIST  SUBSYSTEM 

PRESSURE  RELIEF  ASSY. 

3 

2 

- 

— 

— 

5 

GROUND  MANUAL  ISOLATION 

2 

- 

— 

— 

2 

VALVE 

PROPELLANT  TANK 

2 

- 

— 

2 

COMMUNICATION  SCREEN 

- 

1 

1 

2 

GALLERY  LEG  SCREEN 

- 

- 

— 

— 

1 

1 

COLLECTOR  MANIFOLD 

- 

- 

— 

1 

1 

SCREEN 

_ ! 

TANK  ISOLATION  VALVE 

1 

4 

— 

— 

— 

5 

CROSSFEED  VALVE 

1 

- 

— 

1 

1 

3 

COUPLINGS  ( SINGLE  SEAL ) 

_ 

11 

- 

— 

“ 

11 

GIMBAL  BELLOWS 

13 

2 

— 

— 

— 

15 

FLEX  LINE  ASSEMBLY 

2 

- 

— 

— 

— 

2 

ALIGNMENT  BELLOWS 

2 

1 

- 

— 

— 

3 

LIIJES  AND  FITTINGS 

4 

2 

1 

7 

OME  SUBSYSTEM 

OME  ASSEMBLY 

INLET  FILTER  & ORIFICE 

- 

2 

— 

— 

2 

BIPROPELLANT  VALVE 

1 

5 

- 

— 

— 

6 

BIPROP  CAVITY  PRESS 

1 

1 

— 

— 

— 

2 

RLF  VALVE 

PLATELET  INJECTOR 

2 

1 

— 

— 

3 

COMBUSTION  CHAMBER 

2 

- 

- 

— 

— 

2 

NOZZLE  EXTENSION 

1 

1 

- 

— 

— 

2 

COUPLINGS  (SINGLE  SEAL) 

- 

4 

- 

— 

— 

4 

TVC  GIMBAL  BELLOWS 

2 

1 

- 

— 

— 

3 

ALIGNMENT  BELLOWS 

1 

1 

— 

— 

— 

2 

LINES  AND  FITTINGS 

1 

1 
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TABLE  III  Sununary  of 

lOA  Potential 

Critical  Items  (OMS 

HW) 

= = «a5a=aa  = = =x-3=,«as-3s-B-a;:s=ss=  = = 

= = = = = = 

======= 

II 

H 

II 

II 

11 

II 

= = = = = = = 

— = — — 

Criticality: 

1/1 

2/lR 

2/2 

3/lR 

3/2R 

TOTA 

3SSKaaaBats3K3ssssaBsssssa  = = 

====== 

OME  SUBSYSTEM 

GN2  ASSEMBLY 

STORAGE  TANK 

1 



_ 

GN2  PNEUMATIC  PACK 

— 

1 

1 

HOUSING 

X 

PRESSURE  ISOLATION  VLV 

1 

_ 

1 

REGULATOR 

_ 

3 

X 

-3 

CHECK  VALVE 

_ 

1 

2 

o 

-3 

ACCUMULATOR 

1 

1 



■J 

O 

ENGINE  CONTROL  VALVE 

— 

11 



_ 

11 

PNEUMATIC  ACTUATOR 

1 

5 



1 

7 

PINION  GEAR  Sc  DRIVE 

— 

2 



0 

ASSEMBLY 

PURGE  VALVE  ASSEMBLY 

_ 



3 

*3 

LINES  S.  FITTINGS 

- 

2 

- 

1 

- 

1 J 

3 

OME  SUBSYSTEM 

TVC  ASSEMBLY 

GIMBAL  RING 

1 



_ 

GIMBAL  RING  BEARING 

_ 

1 



X 

1 

GIMBAL  RING  MOUNT.  PAD 

1 

_ 

X 

1 

ACME  SCREW/NUT  TUBE 

— 

2 

_ 

X 

o 

ANTIBACK  DEVICE 

_ 

1 

1 

SPHERICAL  ROD  END 

2 

_ 

X 

o 

BEARING 

MECHANICAL  STOP, SNUBBER 

_ 

1 

OUTPUT  SHAFT 

1 

- 

- 

- 

X 

1 

TOTAL  1 

54  1 

87  1 

1 1 

13  1 

5 1 

160 
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+ 

1 

1 TABLE  IV  Sununary  of  lOA  Potential  Critical  Items  (QMS  EPD&C) 

= :=:==*=.=£  = =:  = = = =:  = = = = = = = = = = = = = = =:  = 

: = 33sas3ss 

Criticality:  | 

1/1  1 

2/lR  1 

2/2  1 

3/lR  1 

3/2R  1 

TOTAL 

HE  PRESS  SUBSYSTEM 

CONTROLS 

VALVES 

CONTROLLER 

- 

- 

- 

1 

— 

1 

DIODE 

- 

- 

- 

6 

— 

6 

DRIVER 

- 

- 

— 

— 

— 

FUSE 

- 

- 

- 

— 

RESISTOR 

- 

- 

- 

— 

— 

— 

SWITCH,  TOGGLE 

- 

4 

- 

— 

— 

4 

INSTRUMENTATION 

METER 

- 

- 

- 

— 

— 

~ 

SENSOR,  PRESSURE 

- 

- 

- 

— 

— 

— 

SENSOR,  TEMPERATURE 

- 

- 

— 

— 

— 

SWITCH,  TOGGLE 

— 

— 

— 

" 

PROP  STOR  & DIST  SUBSYSTEM 

CONTROLS 

1 

VALVES 

DIODE 

- 

2 

- 

2 

4 

8 

DRIVER 

- 

- 

- 

— 

— 

— 

FUSE 

- 

- 

- 

— 

— 

RELAY 

- 

- 

- 

4 

8 

12 

RESISTOR 

- 

- 

- 

28 

28 

SWITCH,  TOGGLE 

- 

2 

- 

— 

— 

2 

INSTRUMENTATION 

FUSE 

- 

- 

— 

— 

— 

“ 

INDICATOR,  EVENT 

- 

- 

- 

— 

— 

— 

METER 

- 

- 

- 

— 

— 

SENSOR,  PRESSURE 

- 

- 

- 

— 

— 

— 

SENSOR,  TEMPERATURE 

- 

- 

2 

— 

- 

2 

SWITCH,  ROTARY 

+ 
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TABLE  IV  Summary  of  lOA 

Potential  Critical 

Items  ( 

OMS  EPD&C) 

= = ='  = = = = = = =*  = = = = = = = = = = = = = = = = = 

= = =r  = =t  = 

= = = = = = = 

= = = = = = 

Criticality: 

1 1/1 

1 2/lR 

1 2/2 

1 3/lR 

1 3/2R 

1 TOTAL 

OME  SUBSYSTEM 

CONTROLS 

GN2  ASSEMBLY 

VALVES 

DIODE 

_ 

_ 



DRIVER 

- 

- 

— 

10 

4 

14 

FUSE 

- 

2 

6 



8 

RESISTOR 

— 

6 

_ 

6 

SWITCH,  TOGGLE 

— 

2 

_ 

2 

1 

5 

TVC  ASSEMBLY 

CONTROLLER 

_ 

_ 

FUSE 

_ 

_ 

INSTRUMENTATION 

GN2  ASSEMBLY 

SENSOR,  PRESSURE 

— 

_ 

1 

1 

OME  ASSEMBLY 

FUSE 



_ 

METER 

_ 

_ 

— 

SENSOR,  POSITION 

— 



SENSOR,  PRESSURE 

— 

_ 



SENSOR,  TEMPERATURE 

1 



_ 

1 

TVC  ASSEMBLY 

SENSOR,  POSITION 

- 

- 

- 

- 

- 

- 

THERMAL  CONTROL  SUBSYSTEM 

POD 

DRIVER 

— 

22 

_ 

_ 

22 

FUSE 

_ 



HEATER 

' - 

— 

_ 



41 

41 

RELAY 

4 

_ 

_ 

4 

RESISTOR 

_ 

_ 



SENSOR,  TEMPERATURE 

— 

_ 



SWITCH,  THERMAL 

— 

16 



16 

SWITCH,  TOGGLE 

2 



2 

CROSSFEED 

DRIVER 

_ 



FUSE 

_ 



_ 

HEATER 

- 

- 

_ 

_ 

10 

10 

RELAY 

— 

— 



_ 

1 

1 

RESISTOR 

— 

_ 



SENSOR,  TEMPERATURE 

— 

5 

_ 

5 

SWITCH,  THERMAL 

— 

_ 

17 

17 

SWITCH,  TOGGLE 

- 

- 

- 

- 

TOTAL 

- 

63 

8 

31 

114 

216 
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4.1  Analysis  Results  - Helium  Pressurization  Subsystem 

Forty-one  (41)  failure  modes  were  analyzed  in  the  helium 
pressurization  subsystem  and  twenty-seven  (27)  are  identified  as 
PCIs.  Of  the  27  PCIs,  twenty-two  (22)  are  single  point  failures 
which  could  result  in  possible  damage  to  surrounding  pod 
components,  inability  to  repressurize  the  propellant  tanks,  or 
mixing  of  hypergolic  propellants  in  helium  lines.  The  remaining 
five  (5)  PCIs  could  result  in  the  loss  of  life  or  vehicle  if  all 
redundancy  were  lost. 

These  critical  failures  are  caused  by  helium  tank  rupture,  helium 
leakage  due  to  stiructural  failure  of  components  or  lines,  flow 
path  loss  due  to  failure  to  open  of  components  or  system  contami- 
nation, and  check  valve  failures.  The  redundancy  provided  by  the 
existence  of  two  OMS  pods  is  of  no  benefit  in  the  helium 
pressurization  subsystem  since  there  is  no  helium  connection 
between  the  pods . 

4.2  Analysis  Results  - Propellant  Storage  and  Distribution 
Subsystem 

One  hundred  seven  (107)  failure  modes  were  analyzed  in  the 
propellant  storage  and  distribution  subsystem,  of  which  fifty- 
nine  (59)  are  identified  as  PCIs.  Fifty-three  (53)  of  the  59 
PCIs  are  single  point  failures  which  could  result  in  leakage  of 
propellant,  inability  to  use  or  deplete  propellant,  system  over- 
pressurization, or  loss  of  OMEs . One  (1)  of  the  59  PCIs  could 
result  in  the  loss  of  life  or  vehicle  if  all  redundancy  were 
lost.  The  remaining  five  (5)  PCIs  could  result  in  loss  of 
mission  with  the  loss  of  all  redundancy. 

These  critical  failures  are  caused  by  structural  failure  of  the 
propellant  tank,  components,  and  propellant  lines,  seal  failures, 
contamination,  failure  of  valves  to  open,  failure  of  the  pressure 
relief  assembly,  and  acquisition  system  screen  structural 
failures.  The  dual  pod  redundancy  benefits  only  those  components 
located  downstream  of  the  crossfeed  line. 

4.3  Analysis  Results  - Orbital  Maneuvering  Engine  Subsystem 
4.3.1  Analysis  Results  - OME  Assembly 

Thirty-nine  (39)  failure  modes  were  analyzed  in  the  OME  assembly, 
of  which  twenty-seven  (27)  are  identified  as  PCIs.  All  of  the  27 
PCIs  are  single  point  failures  resulting  in  the  leakage  of 
propellant,  loss  of  propellant  flow  path,  engine  explosion,  or 
loss  of  engine  on-off  control. 

These  critical  failures  are  caused  by  structural  failure  of 
components  and  propellant  lines,  seal  failures,  contamination, 
failure  to  open  or  close  of  the  bipropellant  valves,  inadequate 
engine  cooling,  and  structural  failures  of  the  injector  assembly, 
combustion  chamber,  and  nozzle  extension. 
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4.3.2  Analysis  Results  - OME  GN2  Pressurization  Subsystem 

Seventy— five  (75)  failure  modes  were  analyzed  in  the  GN2 
pressurization  subsystem  and  thirty-seven  (37)  are  found  to  be 

i ^ P point  failures  which 

could  result  in  possible  shrapnel  damage  to  surrounding  pod 

components  or  inability  to  actuate  the  bipropellant  valves.  The 
remaining  seven  (7)  PCIs  could  produce  the  same  result  after  the 
loss  of  all  redundancy. 

critical  failures  are  caused  by  storage  tank,  accumulator, 
and  actuator  ruptures,  leakage  of  GN2  due  to  structural  failures 
of  components,  lines,  and  seal  failures,  loss  of  GN2  flow  path 
due  to  failure  to  open  of  components  or  system  contamination,  and 
structural  failures  of  the  actuator  and  rack-and-pinion 
assemblies.  The  accumulator  is  considered  redundant  for  upstream 
pressurization  loss  failures  because  of  its  remaining  single 
engine  start  capability.  ^ ^ 


The  loss  of  purge  capability  is  a critical  failure  for  the  Manual 
TAL  procedure,  which  is  considered  a contingency  abort  mode. 


4.3.3  Analysis  Results  - OME  Thrust  Vector  Control  Subsystem 

^he  twenty-two  (22)  failure  modes  analyzed  in  the  TVC 
subsystem,  ten  (10)  are  identified  as  PCIs.  All  of  the  10  PCIs 
are  single  point  failures  which  could  result  in  possible 

leakage,  engine  burn- through,  or  possible  loss  of 
vehicle  control . 


Thep  critical  failures  are  caused  by  structural  failures 
gimbal  actuators  and  engine-to— vehicle  attachments. 


in  the 


°^®  engine  is  also  a critical  failure  for 
procedure,  which  is  considered  a contingency  abort 


4.4  Analysis  Results  - Electrical  Power  Distribution  and 
Control  Subsystem 


4.4.1  Analysis  Results  - Controls 

Two  hundred  and  eighty-one  (281)  failure  modes  have  been 
analyzed  in  the  EPD&C  controls  subsystem  and  ninety-four  (94)  are 
PCIS.  Of  the  94  PCIS,  eighteen  (18)  are  single  point  fallurL 
Since  their  failure  resulted  in  critical  valves  being  stuck  open 
or  closed.  Another  thirty-one  (31)  of  the  94  PCIs  could  result 
in  loss  of  vehicle/life  if  all  redundancy  were  lost.  The 
remaining  forty-five  (45)  PCIs  could  result  in  loss  of  mission  if 
all  redundancy  were  lost. 


Criticalities  assigned  to  EDP&C  failure  modes  were  derived  from 
the  effect  the  failure  had  on  the  component  being  controlled 
(valve  or  TVC  actuator).  The  majority  of  the  EPD&C  items 
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controlled  valves.  Therefore,  critical  EPD&C  failure  modes 
caused  critical  valves  to  be  stuck  open  or  closed  resulting  in 
overpressurization  of  lines,  underpressurization  of  lines,  mixing 
of  hypergolic  propellants,  loss  of  crossfeed,  or  loss  of  bi- 
propellant valve  control . 

4.4.2  Analysis  Results  - Instrumentation 

Forty— one  (41)  failure  modes  have  been  analyzed  in  the  EPD&C 
instrumentation  subsystem  and  four  (4)  are  PCIs.  All  four  of  the 
PCIs  are  single  point  failures.  Three  (3)  are  false  indications 
of  low  propellant  temperature  in  either  the  TK  or  engine  inlet 
line.  The  remaining  one  (l)  PCI  is  a false  sensor  indication  in 
the  GN2  assembly.  The  effect  is  OME  engine  failure  criticalities 
assigned  to  instrumentation  (pressure,  position,  and  temperature 
sensors)  failure  modes  are  based  on  the  ability  to  discern 
between  the  failure  of  the  sensor  and  a real  failure  of  the 
system.  Also  taken  into  account  was  the  time  available  in  which 
a decision,  based  on  instrument  indication,  must  be  made. 

4.4.3  Analysis  Results  - Thermal  Control 

Three  hundred  forty-five  (345)  failure  modes  have  been  analyzed 
in  the  thermal  control  subsystem  and  one  hundred  eighteen  (118) 
are  PCIs.  Forty-nine  (49)  of  the  118  are  single  point  failures 
leading  to  possible  pod  structural  damage,  an  unplanned  change  in 
vehicle  attitude,  or  early  mission  termination.  The  remaining 
sixty-nine  (69)  PCIs  result  in  the  pod  or  crossfeed  HTR  system 
failed  "off"  once  all  redundancy  has  failed.  The  effects  of 
losing  the  thermal  system  are  unplanned  change  in  vehicle 
attitude,  loss  of  crossfeed/ interconnect , or  early  mission 
termination. 
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APPENDIX  A 
ACRONYMS 


Ac 

- 

Nozzle  inlet  plane  area 

ac 

- 

Alternating  Current 

Ae 

- 

Nozzle  exit  plane  area 

AOA 

- 

Abort  Once  Around 

At 

- 

Nozzle  throat  area 

ASSY 

- 

Assembly 

ATO 

- 

Abort  to  Orbit 

ATT 

- 

Attitude 

BPS 

- 

Backup  Flight  System 

CIL 

- 

Critical  Items  List 

CL 

- 

Close  (Closed) 

CRIT 

- 

Criticality 

CRT 

- 

Cathode  Ray  Tube 

C&W 

- 

Caution  and  Warning  System 

D/C 

- 

Displays  and  Controls 

DAP 

- 

Digital  Autopilot 

dc 

- 

direct  current 

DISP 

- 

Display 

DPS 

- 

Data  Processing  System 

EPD6.C 

- 

Electrical  Power  Distribution  and 

Control 

EPDCS 

- 

Electrical  Power  Distribution  and 

Control  System 

F 

- 

Functional,  Fahrenheit 

PC 

- 

Flight  Critical 

FDA 

- 

Fault  Detection  Annunciation 

PM 

Failure  Mode 

FMEA 

- 

Failure  Mode  and  Effects  Analysis 

FRCS 

- 

Forward  Reaction  Control  System 

FSSR 

- 

Flight  Systems  Software  Requirements 

ft 

- 

Feet 

FU 

- 

Fuel 

G 

- 

Gravity 

GFE 

- 

Government  Furnished  Equipment 

GN2 

- 

Gaseous  Nitrogen 

GNC 

- 

Guidance  Navigation  and  Control 

GPC 

- 

General  Purpose  Computer 

GSE 

- 

Ground  Support  Equipment 

He 

- 

Helium 

HW 

- 

Hardware 

Hz 

- 

Hertz  (cycles  per  second) 

lOA 

- 

Independent  Orbiter  Assessment 

Isol 

- 

Isolation 

JSC 

- 

Johnson  Space  Center 

LPS 

- 

Launch  Processing  System 

LRU 

- 

Line  Replaceable  Unit 

LVDT 

- 

Linear  Variable  Differential  Transformer 

MCA 

- 

Motor  Control  Assembly 

MCC 

- 

Mission  Control  Center  (JSC) 

MDAC 

- 

McDonnell  Douglas  Astronautics  Company 
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MDM 

MECO 

MM 

MMH 

MNVR 

MOD 

MSEC 

N204 

NA 

NASA 

NSTS 

NTO 

O.D. 

01 

OMRSD 

OME 

OMS 

OP 

OPS 

OX 

OXID 

PASS 

PBI 

Pc 

PCI 

PCMMU 

PLS 

PRESS 

psi 

psia 

psid 

psig 

RCS 

RHC 

RI 

RM 

RPC 

RTLS 

scfm 

SFOM 

SM 

SPEC 

STS 

SSSH 

SW 

TAL 

TCA 

TD 

TK 

TPS 

TVC 

V 

VLV 


- Multiplexer/Demultiplexer 

- Main  Engine  Cutoff 

- Major  Mode 

- Monomethyl  Hydrazine 

- Maneuver 

- Mission  Operations  Directorate 

- millisecond 

- Nitrogen  Tetroxide 

- Not  Applicable 

- National  Aeronautics  and  Space  Administration 

- National  Space  Transportation  System 

- Nitrogen  Tetroxide 

- Outside  Diameter 

- Operational  Instrumentation 

- Operational  Maintenance  Requirements  and 
Specifications  Document 

- Orbital  Maneuvering  Engine 

- Orbital  Maneuvering  System 

- Open 

- Operations 

- Oxidizer 

- Oxidizer 

- Primary  Avionics  Software  System 

- Push-Button  Indicator 

- Chamber  Pressure 

- Potential  Critical  Item 

- Pulse  Code  Modulator  Master  Unit 

- Primary  Landing  Site 

- Pressure 

- Pounds  Per  Square  Inch 

- Pounds  Per  Square  Inch  Absolute 

- Pounds  Per  Square  Inch  Differential 

- Pounds  Per  Square  Inch  Gage 

- Reaction  Control  System 

- Rotational  Hand  Controller 

- Rockwell  International 

- Redundancy  Management 

- Remote  Power  Controller 

- Return  to  Launch  Site 

- Standard  Cubic  Feet  per  Minute 

- Shuttle  Flight  Operations  Manual 

- Systems  Management 

- Specification 

- Space  Transportation  System 

- Space  Shuttle  Systems  Handbook 

- Software 

- Transatlantic  Abort  Landing 

- Thrust  Chamber  Assembly 

- Touch  Down 

- Tank 

- Thermal  Protection  System 

- Thrust  Vector  Control 

- Velocity,  Volts 

- Valve 
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DEFINITIONS,  GROUND  RULES,  AND  ASSUMPTIONS 


B.l  Definitions 

B.2  Project  Level  Ground  Rules  and  Assumptions 
B.3  Subsystem-Specific  Ground  Rules  and  Assumptions 
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APPENDIX  B 

DEFINITIONS,  GROUND  RULES,  AND  ASSUMPTIONS 


B.l  Definitions 

Definitions  contained  in  NSTS  22206,  Instructions  For  Preparation 
of  FMEA/CIL , 10  October  1986,  were  used  with  the  loTlowing 
amplifications  and  additions. 

INTACT  ABORT  DEFINITIONS : 

RTLS  - begins  at  transition  to  OPS  6 and  ends  at  transition 
to  OPS  9,  post-flight 

TAL  - begins  at  declaration  of  the  abort  and  ends  at 
transition  to  OPS  9,  post-flight 

AOA  - begins  at  declaration  of  the  abort  and  ends  at 
transition  to  OPS  9,  post-flight 

ATO  - begins  at  declaration  of  the  abort  and  ends  at 
transition  to  OPS  9,  post-flight 

CREDIBLE  (^USE)  - an  event  that  can  be  predicted  or  expected  in 
anticipated  operational  environmental  conditions.  Excludes  an 
event  where  multiple  failures  must  first  occur  to  result  in 
environmental  extremes 

CONTINGENCY  CREW  PROCEDURES  - procedures  that  are  utilized  beyond 
tne  standard  malfunction  procedures,  pocket  checklists,  and  cue 
cards 

MISSION  TERMINATION  - termination  of  onorbit  phase  prior  to 
planned  end  of  mission 


EFFECTS /RATIONALE  - description  of  the  case  which  generated  the 
highest  criticality 

highest  criticality  - the  highest  functional  criticality 
determined  in  the  phase-by-phase  analysis 

MODE  (MM)  - major  sub-mode  of  software  operational  secruence 
(OPS)  ^ 

^ - Memory  Configuration  of  Primary  Avionics  Software  Svstem 

( PASS ) ^ 

MISSION  - assigned  performance  of  a specific  Orbiter  flight  with 
payload/ obj ective  accomplishments  including  orbit  phasing  and 
altitude  (excludes  secondary  payloads  such  as  GAS  cans, 
middeck  P/L,  etc. ) 
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MULTIPLE  ORDER  FAILURE  - describes  the  failure  due  to  a single 
cause  or  event  of  all  units  which  perform  a necessary  (critical) 
function 

OFF-NOMINAL  CREW  PROCEDURES  - procedures  that  are  utilized  beyond 
the  standard  malfunction  procedures,  pocket  checklists,  and  cue 
cards 

OPS  - software  operational  sequence 

PRIMARY  MISSION  OBJECTIVES  - worst  case  primary  mission  objec- 
tives  are  equal  to  mission  objectives 

PHASE  DEFINITIONS : 

PRELAUNCH  PHASE  - begins  at  launch  count-down  Orbiter 
power-up  and  ends  at  moding  to  OPS  Major  Mode  102  (liftoff) 

LIFTOFF  MISSION  PHASE  - begins  at  SRB  ignition  (MM  102)  and 
ends  at  transition  out  of  OPS  1 (Synonymous  with  ASCENT) 

ONORBIT  PHASE  - begins  at  transition  to  OPS  2 or  OPS  8 and 
ends  at  transition  out  of  OPS  2 or  OPS  8 

DEORBIT  PHASE  - begins  at  transition  to  OPS  Major  Mode 
301  and  ends  at  first  main  landing  gear  touchdown 

LANDING/ SAFING  PHASE  - begins  at  first  main  gear 
touchdown  and  ends  with  the  completion  of  post-landing 
safing  operations 
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APPENDIX  B 

DEFINITIONS,  GROUND  RULES,  AND  ASSUMPTIONS 


B.2  lOA  Project  Level  Ground  Rules  and  Assumptions 

The  philosophy  embodied  in  NSTS  22206,  Instructions  for 
Preparation  of  FMEA/CIL,  10  October  1986,  was  emploved  with  the 
following  am^ifications  and  additions. 


1.  The  operational  flight  software  is  an  accurate 
implementation  of  the  Flight  System  Software  Requirements 
(FSSRs). 

RATIONALE:  Software  verification  is  out-of-scope  of 
this  task. 

2.  After  liftoff,  any  parameter  which  is  monitored  by  system 
management  (SM)  or  which  drives  any  part  of  the  Caution  and 
Warning  System  (C&W)  will  support  passage  of  Redundancy 
Screen  B for  its  corresponding  hardware  item. 

RATIONALE:  Analysis  of  on-board  parameter  availability 
and/or  the  actual  monitoring  by  the  crew 
is  beyond  the  scope  of  this  task. 

3 . Any  data  employed  with  flight  software  is  assumed  to  be 
functional  for  the  specific  vehicle  and  specific  mission 
being  flown . 

RATIONALE:  Mission  data  verification  is  out-of-scope  of 
this  task. 

4.  All  hardware  (including  firmware)  is  manufactured  and 
assembled  to  the  design  specifications/drawings. 

RATIONALE:  Acceptance  and  verification  testing  is 

designed  to  detect  and  identify  problems 
before  the  item  is  approved  for  use. 

5.  All  Flight  Data  File  crew  procedures  will  be  assumed 
performed  as  written,  and  will  not  include  human  error  in 
their  performance. 

RATIONALE:  Failures  caused  by  human  operational  error 
are  out-of-scope  of  this  task. 
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All  hardware  analyses  will,  as  a minimum,  be  performed  at 
the  level  of  analysis  existent  within  NASA/Prime  Contractor 
Orbiter  FMEA/CILs,  and  will  be  permitted  to  go  to  greater 
hardware  detail  levels  but  not  lesser. 

RATIONALE:  Comparison  of  lOA  analysis  results  with 

other  analyses  requires  that  both  analyses 
be  performed  to  a comparable  level  of 
detail . 

Verification  that  a telemetry  parameter  is  actually 
monitored  during  AOS  by  ground-based  personnel  is  not 
required . 

RATIONALE:  Analysis  of  mission-dependent  telemetry 

availability  and/or  the  actual  monitoring  of 
applicable  data  by  ground-based  personnel  is 
beyond  the  scope  of  this  task. 

The  determination  of  criticalities  per  phase  is  based  on  the 
worst  case  effect  of  a failure  for  the  phase  being  analyzed. 
The  failure  can  occur  in  the  phase  being  analyzed  or  in 
any  previous  phase,  whichever  produces  the  worst  case 
effects  for  the  phase  of  interest. 

RATIONALE:  Assigning  phase  criticalities  ensures  a 
thorough  and  complete  analysis. 

Analysis  of  wire  harnesses,  cables,  and  electrical  connectors 
to  determine  if  FMEAs  are  warranted  will  not  be  performed 
nor  FMEAs  assessed. 

RATIONALE:  Analysis  was  substantially  complete  prior 

to  NSTS  22206  ground  rule  redirection. 

Analysis  of  welds  or  brazed  joints  that  cannot  be  inspected 
will  not  be  performed  nor  FMEAs  assessed . 

RATIONALE:  Analysis  was  substantially  complete  prior 

to  NSTS  22206  ground  rule  redirection. 

Emergency  system  or  hardware  will  Include  burst  discs  and 
will  exclude  the  EMU  Secondary  Oxygen  Pack  (SOP),  pressure 
relief  valves  and  the  landing  gear  pyrotechnics. 

RATIONALE:  Clarify  definition  of  emergency  systems  to 
ensure  consistency  throughout  lOA  project. 


APPENDIX  B 

DEFINITIONS,  GROUND  RULES,  AND  ASSUMPTIONS 


B.3  OMS  Ground  Rules  and  Assumptions 

The  lOA  analysis  was  performed  to  the  component  or  assembly 
level.  The  analysis  considered  the  worst  case  effects  of  the 
hardware  or  functional  failure  on  the  subsystem,  mission,  and 
crew  and  vehicle  safety. 

1 . Top  level  redundancy  will  be  considered  in  determining 
functional  criticality.  The  OMS  function  is  to  provide 
delta-V  for  orbit  insertion,  on-orbit  ops,  and  deorbit. 
From  a top  down  system  analysis  approach,  the  OMS  has 
redundancy  via  the  left  and  right  subsystems,  in 
determining  redundancy  for  hardware  items  downstream  of 
the  crossfeed  line,  items  which  perform  the  same 
function  in  each  pod  may  be  considered  redundant  to 
each  other,  depending  on  the  failure  mode. 

2.  No  RCS  backup  deorbit  capability  exists  in  the  event  of 
loss  of  OMS  deorbit  capability.  It  cannot  be  ensured 
that  enough  OMS  propellant  will  remain  to  complete  an 
RCS  deorbit  burn  since  the  RCS  jets  have  a lower  isp. 
However,  OMS  through  RCS  can  be  used  to  achieve  orbit 
insertion.  An  AOA  abort  can  be  accomplished  without 
OMS  engines . 

3.  Loss  of  an  OME  is,  at  a minimum,  a loss  of  mission 
during  the  on-orbit  phase.  Loss  of  the  first  OME  is 
possible  loss  of  mission  objectives  (ref.  flight  rule 
6-48),  and  loss  of  the  next  OME  will  lead  to  loss  of 
deorbit  capability  (no  RCS  deorbit  assumed)  and  loss  of 
lif®/ vehicle . An  OMS  engine  which  will  be  used  only 
for  critical  burns  is  not  considered  lost. 

4.  OMS  blowdown  capability  to  use/deplete  OMS  prop  will  be 
determined  by  MOD  HP9825  Blowdown  program. 

5.  The  OMS  payload  bay  kit  hardware  will  not  be  addressed 
in  this  analysis. 

6 • Flight  rules  and  Flight  Systems  Software  Requirements 
(FSSR)  will  not  be  used  to  downgrade  criticalities, 
only  to  upgrade  and  provide  better  system 
understanding . 

7 . Redundant  seals  are  considered  in  analyzing  internal 
and  external  leakage  of  components . 
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8.  An  OMS  TVC  failure  (inability  to  control  position  of 
OMS  engine)  does  not  affect  the  ability  to  perform  an 
OMS  dump  before  MECO. 

9.  Analysis  of  component  filters  are  covered  in  the 
analysis  of  the  component.  Filters  which  are  not 
integral  to  other  components  are  analyzed  seperately. 

10.  For  the  thermal  control  analysis  it  is  assumed  that,  at 
the  time  of  vehicle  liftoff,  all  areas  of  the  thermal 
environment  are  within  redlines. 

11.  If  applicable,  the  redundancy  and  criticalities 
assigned  to  an  electrical  component  shall  be  tied  to 
those  assigned  to  mechanical  parts  affected  by  the 
failure  of  the  electrical  component. 

12.  Electrical  components  which  enable  and  inhibit 
operation  (e.g.,  allows  a valve  to  be  opened  and 
closed)  shall  not  be  redundant  to  electrical  components 
which  control  the  operation  (e.g.,  actually  opens  and 
closes  the  valve) . 

13.  Instrumentation  passage  of  screen  B does  not  require 
the  ability  to  discern  between  sensor  or  hardware 
failure,  but  on  detection  of  the  measurement  being  out 
of  a predefined  limit.  The  ability  to  differentiate 
between  sensor  and  hardware  failure  will  be  reflected 
in  the  criticality  assignment. 

14.  Two  OMS  engines  are  required  to  ensure  the  successful 
completion  of  RTLS  and  TAL  pre-MECO  OMS  dumps.  Loss  of 
one  engine  may  result  in  the  inability  to  complete  the 
planned  dump  before  MECO  leading  to  violations  of 
propellant  tank  landing  constraints  and/or  Orbiter  mass 
properties  constraints. 

15.  The  Manual  TAL  procedure  is  considered  a contingency 

abort  mode.  The  Manual  TAL  is  different  from  the 
normal  intact  TAL  abort,  as  defined  in  STS  22206,  due 
to  the  Manual  TAL  requirement  of  a post-MECO  OMS  dump. 
Criticalities  assigned  for  a Manual  TAL  are  not 
considered  in  the  final  abort  criticality  assignment, 
but  are  included  in  the  Effects/Rationale  portion  of 
the  analysis  sheets  as  additional  information.  In 
assigning  Manual  TAL  criticalities,  the  following 
assumptions  were  made:  (1)  two  OMS  engines  are 

rec[uired  to  perform  the  post-MECO  OMS  dump  to  avoid 
Orbiter  mass  properties  violations,  (2)  both  engines 
must,  therefore,  have  successful  purges  between  the  pre 
and  post-MECO  dumps,  and  (3)  loss  of  TVC  control  of  one 
engine  will  result  in  either  inability  to  use  the 
affected  engine  or  loss  of  vehicle  control. 
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16. 


The  crew  will  manually  shut  down  an  OMS  engine  in 
response  to  an  OMS  FDA  caused  by  the  violation  of 
engine  operating  limits  before  the  effects  become 
life/vehicle  threatening  (e.g.,  engine  explosion). 
However,  this  action  may  not  preclude  damage  to  and 
loss  of  the  engine.  This  assiomption  does  not  apply  to 
failures  which  lead  directly  to  catastrophic  effects 
(e.g.,  engine  structural  failures). 
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APPENDIX  C 
DETAILED  ANALYSIS 


This  section  contains  the  lOA  analysis  worksheets  generated 
during  the  analysis  of  this  subsystem.  The  information  on  these 
worksheets  is  intentionally  similar  to  the  NASA  FMEAs.  Each  of 
these  sheets  identifies  the  item  being  analyzed  and  the  parent 
assembly.  For  each  failure  mode,  the  possible  causes  are 
outlined,  and  the  assessed  hardware  and  functional  criticality 
for  each  mission  phase  is  listed,  as  described  in  the  NSTS  22206 , 
Instructions  for  Preparation  of  FMEA  and  CIL,  10  October  1986 . 
Finally , effects  are  entered  at  the  bottom  of  each  sheet , and  the 
worst  case  criticality  is  entered  at  the  top. 


LEGEND  FOR  lOA  ANALYSIS  WORKSHEETS 


Hardware  Criticalities: 

1 = Loss  of  life  or  vehicle 

2 = Loss  of  mission  or  next  failure  of  any  redundant  item 

(like  or  unlike)  could  cause  loss  of  life/vehicle 

3 = All  others 

Functional  Criticalities: 

IR  = Redundant  hardware  items  (like  or  unlike)  all  of  which, 
if  failed,  could  cause  loss  of  life  or  vehicle. 

2R  = Redundant  hardware  items  (like  or  unlike)  all  of  which, 
if  failed,  could  cause  loss  of  mission. 

Redundancy  Screen  A: 

1 = Is  Checked  Out  PreFlight 

2 = Is  Capable  of  Check  Out  PreFlight 

3 = Not  Capable  of  Check  Out  PreFlight 
NA  = Not  Applicable 

Redundancy  Screens  B and  C: 

P = Passed  Screen 
F = Failed  Screen 
NA  = Not  Applicable 


C-1 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

100 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  TANK,  HELIUM  STORAGE 

FAILURE  MODE:  RUPTURE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

HARDWARE  COMPONENTS 

2) 

ASSEMBLIES 

3) 

HE  PRESS  SUBSYSTEM 

4) 

HELIUM  STORAGE  TANK 

5) 

6) 

7) 

8) 

9) 

FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS: 

1/1 

TAL: 

1/1 

AOA: 

1/1 

ATO: 

1/1 

REDUNDANCY  SCREENS:  A [ 


LOCATION: 

PART  NUMBER:  MC282-0082-0001 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [ ] 


CAUSES:  PIECE-PART  STRUCTURAL 

HIGH  TEMPERATURE,  HIGH  PRESSURE 


FAILURE,  MANUFACTURING  DEFECT, 

, MATERIAL  DEFECT,  WELD  FAILURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  POD 
STRUCTURAL  AND/OR  TPS  DAMAGE  FROM  POSSIBLE  POD 
OVERPRESSURIZATION,  AND  DURING  ENTRY  DUE  TO  LOSS  OF  HELIUM 
PRESSURANT  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING 
IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  MC282-0082  2)  73A000014,  #201  3)  VS70-431099 

4)  JSC  11174,11.3  5)  VS70-943099,43AA,BA  6)  JSC  12770  7)  JSC 


REPORT  DATE  02/05/87 
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INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/15/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  1/1 

MDAC  ID:  101  ABORT:  1/1 

ITEM:  TANK,  HELIUM  STORAGE 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  STORAGE  TANK 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  MC282-0082-0001 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MANUFACTURING  DEFECT, 

HIGH  TEMPERATURE,  HIGH  PRESSURE,  MATERIAL  DEFECT,  WELD  FAILURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DURING  ENTRY  DUE 
TO  LOSS  OF  HELIUM  PRESSURANT  AND  SUBSEQUENT  INABILITY  TO 
USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  MC282-0082  2)  73A000014,  #201  3)  VS70-431099 

4)  JSC  11174,11.3  5)  VS70-943099,43AA,BA  6)  JSC  12770  7)  JSC 

19950 


REPORT  DATE  02/05/87 
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INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

102 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING,  HELIUM  FILL 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  FILL  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

HDW/FUNC 

3/3 

3/2R 

3/2R 

2/lR 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0017-0601 

CAUSES:  SEAL  FAILURE,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  PROCEDURAL  ERROR,  MATERIAL  DEFECT,  HIGH  PRESSURE 

EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO  LOSS  OF  HELIUM 
PRESSURANT  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING 
IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  MC276-0017  2)  73A000014,  #202  3)  VS70-431099 

4)  JSC  11174,11.3  5)  VS70-943099,43AA,BA  6)  FLIGHT  RULES  6-1, A, 

6-40, A, B 


REPORT  DATE  02/05/87 


C-4 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

103 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING,  HELIUM  FILL 

FAILURE  MODE:  FAILS  TO  COUPLE/UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  FILL  COUPLING 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT; 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0017-0601 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  MC276-0017  2)  73A000014  #202  3)  VS70-431099  4) 

JSC  11174,11.3  5)  VS70-954099,43AA,BA 


REPORT  DATE  02/05/87 


C-5 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
/NA 


FLOW 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  FILL  COUPLING 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

104 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


ITEM:  COUPLING,  HELIUM  FILL 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT; 

/NA 

AOA: 

/NA 

DEORBIT; 

LANDING/SAFING: 

/NA 

3/3 

ATO; 

/NA 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0017-0601 


CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  MC276-0017  2)  73A000014  #202  3)  VS70-431099  4) 

JSC  11174,11.3  5)  VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-6 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


12/30/86 

OMS 

105 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

1/1 

1/1 


ITEM;  LINES  AND  MECHANICAL  FITTINGS -HELIUM  PRESSURE 

FAILURE  MODE;  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL; 

1/1 

ONORBIT: 

2/2 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  MC62 1-0059 

CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  MECHANICAL  SHOCK,  WELD 
FAILURE,  SEAL  FAILURES,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT, 
HIGH  PRESSURE 

EFFECTS/RATIONALE : 

TANK  TO  ISOL  VALVES;  REGS  TO  QUAD  CHECK  VALVES.  FIRST  FAILURE  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO  LOSS  OF  HELIUM 
PRESSURANT  AND  POSSIBLE  INABILITY  TO  USE/DEPLETE  PROP  RESULTING 
IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES;  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-7 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

106 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  LINES  AND  MECHANICAL  FITTINGS -HELIUM  PRESSURE 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
ASSEMBLIES 
HE  PRESS  SUBSYSTEM 

HELIUM  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/2 

TAL: 

ONORBIT: 

2/2 

AO  A: 

DEORBIT: 

1/1 

ATO: 

LANDING/S AFING : 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION: 

PART  NUMBER:  MC62 1-0059 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE : 

TANK  TO  ISOL  VALVES;  REGS  TO  QUAD  CHECK  VALVES.  FIRST  FAILURE  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO  INABILITY  TO 
REPRESSURIZE  PROP  TANK  AND  INABILITY  TO  USE/DEPLETE  PROP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007  6)  FLIGHT  RULE  6-1, B 


REPORT  DATE  02/05/87 


C-8 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

107 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  VALVE,  HELIUM  ISOLATION 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  73P620001 


CAUSES:  CONTAMINATION,  LOSS  OF  INPUT,  PIECE-PART  STRUCTURAL 

FAILURE,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

WITH  FAILURE  TO  OPEN  OF  ONE  TANK  ISOL  VALVE,  ONE  FAILURE  (FAILURE 
TO  OPEN  OF  THE  REDUNDANT  ISOL  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DURING  ENTRY  DUE  TO  LOSS  OF  PRESSURIZATION  SOURCE 
AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014  #203-204  2)  VS70-431099  3)  73P620001 

4)  JSC  12770  5)  JSC  11174,11.3  6)  VS70-943099, 43AA,BA  7) 

FLIGHT  RULE  6-1, B 8)  JSC  19950 


REPORT  DATE  02/05/87 


C-9 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

108 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  VALVE,  HELIUM  ISOLATION 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS; 

3/lR 

LIFTOFF; 

3/lR 

TAL: 

3/lR 

ONORBIT: 

3/lR 

AOA: 

3/lR 

DEORBIT: 
LANDING/ SAFING; 

3/lR 

3/lR 

ATO: 

3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  73P620001 


CAUSES:  CONTAMINATION,  LOSS  OF  INPUT,  PIECE-PART  STRUCTURAL 

FAILURE,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE 
RUPTURE  OF  PROP  TANKS  AND  LINES,  FIRE/EXPLOSION  HAZARD,  AND 
HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014  #203-204  2)  VS70-431099  3)  73P620001 

4)  JSC  12770  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA  7)  JSC 

19950 


REPORT  DATE  02/05/87 


C-10 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

109 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  VALVE,  HELIUM  ISOLATION 

FAILURE  MODE:  INTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF; 

3/lR 

TAL: 

3/lR 

ONORBIT; 

3/lR 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/lR 
A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  73P620001 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MANUFACTURING  DEFECT,  MATERIAL  DEFECT,  SEAL  FAILURE,  HIGH 
PRESSURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE 
RUPTURE  OF  PROP  TANKS  AND  LINES,  FIRE/EXPLOSION  HAZARD,  AND 
HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014  #203-204  2)  VS70-431099  3)  73P620001 

4)  JSC  12770  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA  7)  JSC 

19950 


REPORT  DATE  02/05/87 


C-11 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

110 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  VALVE,  HELIUM  ISOLATION 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

2/2 

TAL: 

ONORBIT; 

2/2 

AOA: 

DEORBIT: 

1/1 

ATO: 

LANDING/SAFING ; 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS;  A [ 


B C ] C [ ] 


LOCATION; 

PART  NUMBER:  73P620001 


CAUSES: 

DEFECT, 

PRESSURE 


HOUSING  STRUCTURAL  FAILURE,  WELD  FAILURE,  MATERIAL 
MANUFACTURING  DEFECT,  BELLOWS  AND  SEAL  FAILURES,  HIGH 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE 
TO  LOSS  OF  HELIUM  PRESSURANT  AND  SUBSEQUENT  INABILITY  TO 
USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014  #203-204 

4)  JSC  12770  5)  JSC  11174,11.3  6) 

19950 


2)  VS70-431099  3)  73P620001 

VS70-943099,43AA,BA  7)  JSC 


REPORT  DATE  02/05/87 


C-12 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


12/15/86 

OMS 

111 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  2/lR 


ITEM;  VALVE,  HELIUM  ISOLATION 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

2/lR 

LIFTOFF; 

3/2R 

TAL; 

2/lR 

ONORBIT; 

3/2R 

AOA: 

2/lR 

DEORBIT; 

2/lR 

ATO; 

2/lR 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION; 

PART  NUMBER;  73P620001 

CAUSES;  FILTER  BLOCKAGE,  CONTAMINATION 
EFFECTS/RATIONALE : 

WITH  RESTRICTED  FLOW  IN  ONE  TANK  ISOL  VALVE,  ONE  FAILURE 
(RESTRICTED  FLOW  IN  THE  REDUNDANT  ISOL  VALVE)  AWAY  FROM  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO  LOSS  OF  PRESSURIZATION 
SOURCE  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES;  1)  73A000014  #203-204  2)  VS70-431099  3)  73P620001 

4)  JSC  12770  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA  7)  JSC 

19950  8)  FLIGHT  RULE  6-1, B 


REPORT  DATE  02/05/87 


C-13 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

112 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  VALVE,  HELIUM  ISOLATION 

FAILURE  MODE:  DELAYED  OPERATION 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ 

LOCATION: 

PART  NUMBER:  73P620001 


CAUSES:  CONTAMINATION,  MATERIAL  DEFECT 


EFFECTS/RATIONALE ; 

NO  EFFECT.  TANK  ULLAGE  PRESSURE  SUFFICIENT  TO  SUPPORT  BURN  WHILE 
VALVE  OPENING.  WORST  CASE  OF  FAILURE  MODE  IS  "FAILS  TO  OPEN". 


REFERENCES:  1)  73A000014  #203-204  2)  VS70-431099  3)  73P620001 

4)  JSC  12770  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA  7)  JSC 

19950  8)  FLIGHT  RULE  6-1,  B 


REPORT  DATE  02/05/87 


C-14 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/lR 
3/lR 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HIGH  PRESSURE  HELIUM  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/lR 

LIFTOFF: 

3/2R 

TAL; 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/lR 

DEORBIT; 

3/lR 

ATO: 

3/lR 

LANDING/S AFING: 
REDUNDANCY  SCREENS; 

3/3 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  ME276-0032-0019 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/15/86 

OMS 

113 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


ITEM;  COUPLING-TEST  PORT,  HIGH  PRESSURE  HELIUM 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


CAUSES;  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 
FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 


EFFECTS/RATIONALE ; 

FAILURE  OF  FIRST  SEAL  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DtJRING  ENTRY  DUE  TO  LOSS  OF  HELIUM 
PRESSURANT  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING 
IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS.  LEAKAGE  OF  ONE  LEG  CAN  BE  ISOLATED  AND 
OTHER  LEG  UTILIZED. 


REFERENCES;  1)  73A000014  #225-1,  225-2  2)  VS70-431099  3) 

MC621-0059  4)  ME276-0032  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AA, BA 


REPORT  DATE  02/05/87 


C-15 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

114 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  COUPLING-TEST  PORT,  HIGH  PRESSURE  HELIUM 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HIGH  PRESSURE  HELIUM  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT; 
LANDING/S AFING: 

/NA 

3/3 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [ ] 

B C ] 

c [ ] 

LOCATION: 

PART  NUMBER:  ME276-0032-0019 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR. 

MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  #225-1,  225-2  2)  VS070-431099 

MC621-0059  4)  ME276-0032  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AA, BA 


HDW/FUNC 

3/3 

/NA 


REPORT  DATE  02/05/87 


C-16 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

115 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-TEST  PORT,  HIGH  PRESSURE  HELIUM 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HIGH  PRESSURE  HELIUM  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c C ] 

LOCATION: 

PART  NUMBER:  ME276-0032-0019 


CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  #225-1,  225-2  2)  VS070-431099  3) 

MC621-0059  4)  ME276-0032  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AA, BA 


REPORT  DATE  02/05/87 


C-17 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID; 


12/30/86 

OMS 

116 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

2/lR 

2/lR 


ITEM:  LINES  AND  MECHANICAL  FITTINGS -HELIUM  PRESSURE 

FAILURE  MODE;  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  PRESSURE  LINES 

5) 

6) 

7) 

8) 

9) 


AND  MECHANICAL  FITTINGS 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT; 

2/lR 

ATO; 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0059 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


C t P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MECHANICAL  SHOCK,  WELD 

FAILURE,  SEAL  FAILURES,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT 
HIGH  PRESSURE 


EFFECTS/RATIONALE ; 

TANK  ISOL  VALVES  TO  REGS;  TEST  PORT  LINES.  WITH  FAILURE  OF  ONE 
LINE,  ONE  FAILURE  (REDUNDANT  LEG  LINE)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  HELIUM  PRESSURANT  AND  POSSIBLE 
INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF 
PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 
LEAKAGE  IN  ONE  LINE  CAN  BE  ISOLATED  AND  REDUNDANT  LINE  UTILIZED. 


REFERENCES;  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-18 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/30/86 

OMS 

117 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

2/lR 

2/lR 


ITEM:  LINES  AND  MECHANICAL  FITTINGS-HELIUM  PRESSURE 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF; 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO; 

2/lR 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0059 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE : 

TANK  ISOL  VALVES  TO  REGS;  VAPOR  ISOL  VALVE  LEGS.  WITH  RESTRICTED 
FLOW  IN  ONE  LEG,  ONE  FAILURE  (RESTRICTION  IN  REDUNDANT  LEG)  AWAY 
FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO  INABILITY 
TO  REPRESSURIZE  PROP  TANKS  AND  INABILITY  TO  USE/DEPLETE  PROP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007  6)  FLIGHT  RULE  6-1, B 


REPORT  DATE  02/05/87 


C-19 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

2/lR 

2/lR 


OUTPUT, 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  PRESSURE  REGULATOR  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

118 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  REGULATOR  ASSY,  HELIUM  PRESSURE 

FAILURE  MODE:  FAILS  TO  REGULATE  (INTERNAL  LEAKAGE,  HIGH 

FAILS  TO  LOCKUP,  FAILS  TO  CLOSE) 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


FLIGHT  PHASE 
PRE  LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 

2/lR 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 1 ] B [ F ] 


LOCATION: 

PART  NUMBER:  73P620002 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MANUFACTURING  DEFECT,  SEAL  FAILURE,  PRESSURE  SURGE 


EFFECTS/RATIONALE : 

WITH  FIRST  FAILURE,  ONE  FAILURE  (SERIES  REG)  AWAY  FROM  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  POSSIBLE  OVERPRESSURIZATION  AND 
RUPTURE  OF  PROP  TANKS  AND  LINES  RESULTING  IN  LOSS  AND  LEAKAGE  OF 
PROP,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW. 
OVERPRESSURIZATION  EFFECTS  MAY  OCCUR  BEFORE  CORRECTIVE  ACTION 
(CLOSING  OF  TANK  ISOL  VALVE)  CAN  BE  ACCOMPLISHED. 


REFERENCES:  1)  JSC  11174,11.3  2)  73A000014  #205,  #206  3)  VS70- 

431099  4)  JSC  12770  5)  VS70-943099, 43AA,BA  6)  JSC  19950  7) 

73P620002 


REPORT  DATE  02/05/87 


C-20 


c -'1, 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

119 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  REGULATOR  ASSEMBLY,  HELIUM  PRESSURE 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  PRESSURE  REGULATOR  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

2/lR 

LIFTOFF; 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AO  A: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  73P620002 


CAUSES;  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 
MANUFACTURING  DEFECT,  MATERIAL  DEFECT 


EFFECTS/RATIONALE : 

WITH  FIRST  REGULATOR  FAILED  CLOSED,  ONE  FAILURE  (FAILED  CLOSED 
PARALLEL  REG)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING 
ENTRY  DUE  TO  INABILITY  TO  REPRESSURIZE  PROP  TANK  AND  SUBSEQUENT 
INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF 
PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  JSC  11174,11.3  2)  73A000014  #205,  #206  3)  VS70- 

431099  4)  JSC  12770  5)  VS70-943099,43AA,BA  6)  FLIGHT  RULE  6- 

1,B  7)  JSC  19950  8)  73P620002 


REPORT  DATE  02/05/87 


C-21 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

120 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  REGULATOR  ASSEMBLY,  HELIUM  PRESSURE 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  LOW  OUTPUT,  REGULATES  AT 

LOWER  THAN  NORMAL  PRESSURE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  PRESSURE  REGULATOR  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

2/lR 

ATO; 

3/3 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


REDUNDANCY  SCREENS;  A [ 1 ] 
LOCATION: 

PART  NUMBER;  73P620002 


CAUSES;  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE ; 

OUTPUT  (<158  PSIA)  FROM  ONE  REGULATOR,  ONE  FAILURE  (LOW 
OUTPUT  OR  FAILED  CLOSED  PARALLEL  REG)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DURING  ENTRY  DUE  TO  INABILITY  TO  REPRESSURIZE  PROP 
TANK  AND  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES:  1)  JSC  11174,11.3  2)  73A000014  #205 

431099  4)  JSC  12770  5)  VS70-943099,43AA,BA  6) 

7)  73P620002 


, #206  3)  VS70- 

FLIGHT  RULE  6-2 


REPORT  DATE  02/05/87 


C-22 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

121 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  REGULATOR  ASSEMBLY,  HELIUM  PRESSURE 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  PRESSURE  REGULATOR  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  73P620002 

CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE : 

WITH  RESTRICTED  FLOW  IN  FIRST  REGULATOR,  ONE  FAILURE  (RESTRICTED 
FLOW  IN  PARALLEL  REG)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DURING  ENTRY  DUE  TO  INABILITY  TO  REPRESSURIZE  PROP  TANK  AND 
SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTXJRAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES:  1)  JSC  11174,11.3  2)  73A000014  #205,  #206  3)  VS70- 

431099  4)  JSC  12770  5)  VS70-943099,43AA,BA  6)  FLIGHT  RULE  6- 

1,B  7)  JSC  19950  8)  73P620002 


REPORT  DATE  02/05/87 


C-23 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/07/87 

SUBSYSTEM:  OMS 

MDAC  ID:  122 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  REGULATOR  ASSEMBLY,  HELIUM  PRESSURE 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  PRESSURE  REGULATOR  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT: 

2/lR 

ATO; 

LANDING/SAFING ; 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION: 

PART  NUMBER:  73P620002 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


C [ P ] 


CAUSES:  HOUSING  STRUCTURAL  FAILURE,  AMBIENT  PORT  BELLOWS 

FAILURE,  MANUFACTURING  DEFECT,  WELD  FAILURE,  MATERIAL  DEFECT. 
SEAL  FAILURES 


EFFECTS/RATIONALE : 

WITH  EXTERNAL  LEAKAGE  THROUGH  REGULATOR,  ONE  FAILURE  (EXTERNAL 
LEAKAGE  IN  PARALLEL  REG)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DURING  ENTRY  DUE  TO  LOSS  OF  HELIUM  PRESSURANT,  INABILITY  TO 
MAINTAIN  TANK  PRESSURE,  AND  INABILITY  TO  USE/DEPLETE  PROP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS.  SINGLE  LEAK  CAN  BE  ISOLATED 
AND  OTHER  LEG  UTILIZED. 


REFERENCES;  1)  JSC  11174,11.3  2)  73A000014  #205,  #206  3)  VS70- 

431099  4)  JSC  12770  5)  VS70-943099,43AA,BA  6)  JSC  19950  7) 

73P620002  8)  73A620096 


REPORT  DATE  02/05/87 


C-24 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID; 


12/15/86 

OMS 

123 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  COUPLING-TEST  PORT,  VAPOR  ISOLATION  CHECKOUT 

FAILURE  MODE;  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOLATION  CHECK  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF; 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AO  A: 

3/lR 

DEORBIT; 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [NA  ] 

c [ P ] 

LOCATION; 

PART  NUMBER;  ME276-0032-0005, -0007 

CAUSES;  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 
FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 


EFFECTS/RATIONALE : 

FAILURE  OF  FIRST  SEAL  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO  LOSS  OF  HELIUM 
PRESSURANT  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  1)  73A00014  #223,  224  2)  MC621-0059  3)  VS70-431099 

4)  ME276-0032  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-25 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

124 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

/NA 


ITEM: 

FAILURE  MODE: 


COUPLING-TEST  PORT,  VAPOR  ISOLATION  CHECKOUT 
FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOLATION  CHECK  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

/NA 

TAL: 

/NA 

AO  A: 

/NA 

ATO; 

3/3 


HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


REDUNDANCY  SCREENS;  A [ ] B 

LOCATION: 

PART  NUMBER;  ME276-0032-0005,  -0007 


CAUSES;  PIECE-PART  STRUCTURAL  FAILURE, 
MISHANDLING 


PROCEDURAL  ERROR, 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A00014  #223,  224 

4)  ME276-0032  5)  JSC  11174,11.3  6) 


2)  MC621-0059  3)  VS70-431099 

VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-26 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

125 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

/NA 


ITEM:  COUPLING-TEST  PORT,  VAPOR  ISOLATION  CHECKOUT 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOLATION  CHECK  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  ME276-0032-0005,  -0007 

CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A00014  #223,  224  2)  MC621-0059  3)  VS70-431099 

4)  ME276-0032  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-27 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

126 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  VALVE,  VAPOR  ISOLATION-OXIDIZER 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

2/lR 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 

LOCATION: 

PART  NUMBER:  73P620004 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  LOSS  OF  INPUT,  PIECE-PART  STRUCTURAL 

FAILURE,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

WITH  FAILURE  TO  OPEN  OF  FIRST  VALVE,  ONE  FAILURE  (FAILURE  TO  OPEN 
OF  OTHER  VAPOR  ISOL  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DURING  ENTRY  DUE  TO  INABILITY  TO  REPRESSURIZE  OXID 
TANK  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES;  1)  73A00014  #207-1,-2  2)  VS70-431099  3)  73P620004 

4)  JSC  12770  5)  FLIGHT  RULE  6-1, B 6)  JSC  11174,11.3  7)  VS70- 

943099, 43AA,BA  8)  TM-ES86009-43  9)  JSC  19950 


REPORT  DATE  02/05/87 


C-28 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

127 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  VALVE,  VAPOR  ISOLATION-OXIDIZER 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/lR 

RTLS: 

3/lR 

LIFTOFF; 

3/lR 

TAL; 

3/lR 

ONORBIT; 

3/lR 

AOA: 

3/lR 

DEORBIT; 

3/lR 

ATO; 

3/lR 

LANDING/S AFING: 
REDUNDANCY  SCREENS: 

3/lR 
A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  73P620004 


CAUSES:  CONTAMINATION,  LOSS  OF  INPUT,  PIECE-PART  STRUCTURAL 

FAILURE,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  ALL  REDtJNDANCY  IS  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  MIXING  OF  PROP  OR  PROP  VAPORS  IN 
HELIUM  LINES  RESULTING  IN  POSSIBLE  EXPLOSION  AND  RUPTURE  OF 
LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A00014  #207-1,-2  2)  VS70-431099  3)  73P620004 

4)  JSC  12770  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA  7)  TM- 

ES86009-43  8)  JSC  19950 


REPORT  DATE  02/05/87 


C-29 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

128 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  VALVE,  VAPOR  ISOLATION-OXIDIZER 

FAILURE  MODE:  INTERNAL  LEAKAGE,  REVERSE  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING: 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 

3/lR 

ABORT 

RTLS: 

TAL: 

AOA; 

ATO; 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  73P620004 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MANUFACTURING  DEFECT,  MATERIAL  DEFECT,  SEAL  FAILURE,  HIGH 
PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  MIXING  OF  PROP  OR  PROP  VAPORS  IN 
HELIUM  LINES  RESULTING  IN  POSSIBLE  EXPLOSION  AND  RUPTURE  OF 
LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A00014  #207-1,-2 

4)  JSC  12770  5)  JSC  11174,11.3  6) 

ES86009-43  8)  JSC  19950 


2)  VS70-431099  3)  73P620004 

VS70-943099,43AA,BA  7)  TM- 


REPORT  DATE  02/05/87 


C-30 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

129 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  VALVE,  VAPOR  ISOLATION-OXIDIZER 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A 

[ 

3 B 

[ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  73P620004 

CAUSES:  HOUSING  STRUCTURAL 

FAILURE, 

WELD  FAILURE,  MATERIAL 

DEFECT,  MANUFACTXJRING  DEFECT,  BELLOWS  AND  SEAL  FAILURES,  HIGH 
PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE 
TO  LOSS  OF  HELIUM  PRESSURANT,  INABILITY  TO  REPRESSURIZE  PROP 
TANKS,  AND  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES:  1)  73A00014  #207-1,-2  2)  VS70-431099  3)  73P620004 

4)  JSC  12770  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA  7)  TM- 

ES86009-43  8)  JSC  19950 


REPORT  DATE  02/05/87 


C-31 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

130 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  VALVE,  VAPOR  ISOLATION-OXIDIZER 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/SAFING; 

HDW/FUNC 

3/3 

3/2R 

3/2R 

2/lR 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER;  73P620004 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE ; 

FLOW  IN  FIRST  VALVE,  ONE  FAILURE  (RESTRICTED  FLOW 
IN  OTHER  VAPOR  ISOL  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DURING  ENTRY  DUE  TO  INABILITY  TO  REPRESSURIZE  OXID 
TANK  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES: 

4)  JSC  12770 
ES86009-43 


1)  73A00014  #207-1,-2  2)  VS70-431099  3) 

5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA 

8)  JSC  19950  9)  FLIGHT  RULE  6-1, B 


73P620004 
7)  TM- 


REPORT  DATE  02/05/87 


C-32 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

3/3 

3/3 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  73P620004 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

131 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


VALVE,  VAPOR  ISOLATION-OXIDIZER 
DELAYED  OPERATION 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


CAUSES:  CONTAMINATION,  MATERIAL  DEFECT 

EFFECTS/RATIONALE : 

NO  EFFECT.  TANK  ULLAGE  PRESSURE  SUFFICIENT  TO  SUPPORT  BURN  WHILE 
VALVE  OPENING.  WORST  CASE  OF  FAILURE  MODE  IS  "FAILS  TO  OPEN". 


REFERENCES:  1)  73A00014  #207-1,-2  2)  VS70-431099  3)  73P620004 

4)  JSC  12770  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA  7)  TM- 

ES86009-43  8)  JSC  19950  9)  FLIGHT  RULE  6-1, B 


REPORT  DATE  02/05/87 


C-33 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

2/lR 

2/lR 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  QUAD  CHECK  VALVE  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


DATE:  12/15/86  HIGHEST  CRITICALITY 

SUBSYSTEM:  OMS  FLIGHT: 

MDAC  ID:  132  ABORT: 

ITEM:  VALVE,  QUAD  CHECK  VALVES 

FAILURE  MODE:  FAILS  TO  OPEN 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 

HDW/FUNC 

3/3 

3/2R 

3/2R 

2/lR 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC284-0481-0001, -0002 


CAUSES:  PIECE-PART 

VAPOR  FREEZES  UNIT, 


STRUCTURAL  FAILURE,  POPPET  BINDS  IN  GUIDE, 
MANUFACTURE  FLAW,  CONTAMINATION 


EFFECTS/RATIONALE : 

WITH  FAILURE  TO  OPEN  OF  ONE  POPPET,  ONE  FAILURE  (FAILURE  TO  OPEN 
OF  PARALLEL  POPPET)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DURING  ENTRY  DUE  TO  LOSS  OF  TANK  REPRESSURIZATION  CAPABILITY  AND 
SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES:  1)  73A000014  #209  2)  VS70-431099  3)  MC284-0481  4) 

JSC  11174,11.3  5)  VS70-943099,43AA,BA  6)  JSC  12770  7)  JSC 

18958  8)  FLIGHT  RULE  6-1,  B 


REPORT  DATE  02/05/87 


C-34 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/15/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  2/lR 

MDAC  ID:  133  ABORT:  2/lR 

ITEM:  VALVE,  QUAD  CHECK  VALVES,  FUEL 

FAILURE  MODE:  FAILS  TO  CLOSE,  INTERNAL  LEAKAGE,  REVERSE  FLOW 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  QUAD  CHECK  VALVE  ASSEMBLY,  FUEL 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS: 

2/lR 

LIFTOFF: 

2/lR 

TAL: 

2/lR 

ONORBIT: 

2/lR 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC284-0481-0001, -0002 

CAUSES:  CONTAMINATION,  POPPE.T  OR  POPPET  SPRING  BINDS,  SEAT  OR 

SEAL  FRACTURE,  MANUFACTURE  FLAW 

EFFECTS/RATIONALE : 

WITH  A FAILURE  TO  CLOSE  OF  ONE  FUEL  VALVE  POPPET,  ONE  FAILURE 
(FAILURE  TO  CLOSE  OF  THE  SERIES  POPPET)  AWAY  FROM  POSSIBLE  LOSS 
OF  LIFE/VEHICLE  DURING  OMS  ENGINE  OPERATIONAL  PHASES.  FUEL 
VAPORS  OR  LIQUID  COULD  MIGRATE  TO  UPSTREAM  SIDE  OF  VAPOR  ISLN 
VALVES  WHERE,  UPON  USE  OF  SYSTEM,  FUEL  LOCATED  BETWEEN  REGULATOR 
AND  VAPOR  ISLN  VALVES  WOULD  BE  FORCED  INTO  OXID  LINES  AND  TANK 
RESULTING  IN  POSSIBLE  EXPLOSION  AND  RUPTURE.  lOSS  OF  ALL 
REDUNDANCY  ALLOWS  MIXING  OF  PROP  OR  VAPORS  IN  LINES  RESULTING  IN 
POSSIBLE  EXPLOSION  AND  RUPTURE  OF  LINES. 

REFERENCES:  1)  73A000014  #209  2)  VS70-431099  3)  MC284-0481  4) 

JSC  11174,11.3  5)  VS70-943099,43AA,BA  6)  JSC  12770  7)  JSC 

18958 


REPORT  DATE  02/05/87 


C-35 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

134 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


ITEM: 

FAILURE  MODE; 


VALVE,  QUAD  CHECK  VALVES,  OXIDIZER 

FAILS  TO  CLOSE,  INTERNAL  LEAKAGE,  REVERSE  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  QUAD  CHECK  VALVE  ASSEMBLY,  OXIDIZER 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/S AFING: 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 

3/lR 

ABORT 

RTLS: 

TAL; 

AOA: 

ATO; 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION; 

PART  NUMBER;  MC284-0481-0001,-0002 


^USES;  CONTAMINATION,  POPPET  OR  POPPET  SPRING  BINDS,  SEAT  OR 
SEAL  FRACTURE,  MANUFACTURE  FLAW 


EFFECTS/RATIONALE ; 

EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE 
life/vehicle  due  to  possible  MIXING  OF  PROP  VAPORS  OR 
LIQUID  IN  HELIUM  LINES  RESULTING  IN  EXPLOSION  AND  RUPTURE. 


REFERENCES;  1)  73A000014  #209  2)  VS70-431099 

^1^511174,11.3  5)  VS70-943099,43AA,BA  6)  JSC 


3)  MC284-0481 
12770  7)  JSC 


4) 


REPORT  DATE  02/05/87 


C-36 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/15/86 

OMS 

135 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

1/1 

1/1 


ITEM;  VALVE,  QUAD  CHECK  VALVES 

FAILURE  MODE;  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  QUAD  CHECK  VALVE  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS; 

1/1 

LIFTOFF: 

1/1 

TAL; 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO; 

1/1 

LANDING/S AFING: 

1/1 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER;  MC284-0481-0001, -0002 


CAUSES;  HOUSING  STRUCTURAL  FAILURE,  WELD  FAILURE,  MATERIAL 
DEFECT,  MANUFACTURING  DEFECT,  HIGH  PRESSURE 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE 
TO  LOSS  OF  HELIUM  PRESSURANT  AND  INABILITY  TO  MAINTAIN  TANK 
PRESSURE  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL 
AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS.  MAY  ALSO  ALLOW  LOSS  AND 
LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW. 


REFERENCES;  1)  73A000014  #209  2)  VS70-431099  3)  MC284-0481  4) 

JSC  11174,11.3  5)  VS70-943099,43AA,BA  6)  JSC  12770  7)  JSC 

18958 


REPORT  DATE  02/05/87 


C-37 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

136 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  VALVE,  QUAD  CHECK  VALVES 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  QUAD  CHECK  VALVE  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

1/1 

DEORBIT: 
LANDING/ S AFING : 

1/1 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS: 

A [ 3 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC284-0481-0001, -0002 

CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 


EFFECTS/RATIONALE : 

TOTAL  BLOCKAGE  OF  SINGLE  INLET  FILTER  RESULTS  IN  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DURING  ENTRY.  LOSS  OF  ABILITY  TO  PRESSURIZE  TANK 
AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  WOULD  RESULT  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014  #209  2)  VS70-431099  3)  MC284-0481  4) 

JSC  11174,11.3  5)  VS70-943099,43AA,BA  6)  JSC  12770  7)  JSC 

18958  8)  FLIGHT  RULE  6-1, B 


REPORT  DATE  02/05/87 


C-38 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
3/lR 
3/lR 

ITEM:  COUPLING-TEST  PORT,  QUAD  CHECK  VALVE 

FAILURE  MODE:  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

137 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  QUAD  CHECK  VALVE  TEST 

5) 

6) 

7) 

8) 

9) 


PORT  COUPLING 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/lR 

DEORBIT; 

3/lR 

ATO; 

3/lR 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  ME276-0032-0005,-0007 

CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 


EFFECTS/RATIONALE : 

FAILURE  OF  FIRST  SEAL  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO  POSSIBLE  LOSS 
OF  HELIUM  PRESSURANT  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE 
PROP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  1)  73A00014  #215-1,-2,  216-1,-2 
MC621-0059  4)  ME276-0032  5)  JSC  11174,11.3 


2)  VS70-431099 
6)  VS70-943099 


3) 


REPORT  DATE  02/05/87 


C-39 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
/NA 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

138 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


COUPLING-TEST  PORT,  QUAD  CHECK  VALVE 
FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  QUAD  CHECK  VALVE  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 

HDW/FUNC 

3/3 

ABORT 

RTLS: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

LIFTOFF: 

/NA 

TAL; 

ONORBIT: 

/NA 

AOA: 

DEORBIT: 

/NA 

ATO; 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B C ] 

c [ ] 

LOCATION: 

PART  NUMBER;  ME276-0032-0005,-0007 


CAUSES;  PIECE-PART  STRUCTURAL  FAILURE. 
MISHANDLING 


PROCEDURAL  ERROR, 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A00014  #215-1,-2,  216-1,-2 

MC621-0059  4)  ME276-0032  5)  JSC  11174,11.3 


2)  VS70-431099 
6)  VS70-943099 


3) 


REPORT  DATE  02/05/87 


C-40 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

139 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-TEST  PORT,  QUAD  CHECK  VALVE 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  QUAD  CHECK  VALVE  TEST 

5) 

6) 

7) 

8) 

9) 


PORT  COUPLING 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

» — I 
t — 1 

c [ ] 

LOCATION: 

PART  NUMBER:  ME276-0032-0005, -0007 

CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A00014  #215-1,-2,  216-1,-2  2)  VS70-431099  3) 

MC621-0059  4)  ME276-0032  5)  JSC  11174,11.3  6)  VS70-943099 


REPORT  DATE  02/05/87 


C-41 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

140 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  3/3 


ITEM; 

FAILURE  MODE: 


LINES  AND  MECHANICAL  FITTINGS -HELIUM  PRESSURE 
RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  HE  PRESS  SUBSYSTEM 

4)  HELIUM  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/SAFING ; 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER;  MC62 1-0059 


CAUSES;  FILTER  BLOCKAGE,  CONTAMINATION 
EFFECTS/RATIONALE : 

COUPLING  LINES.  NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014 

5622  5)  MB0160-007 


2)  VS70-431099  3)  AMS  5562  4)  SAE 


REPORT  DATE  02/05/87 


C-42 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

141 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  VALVE-PRESSURE  RELIEF  ASSEMBLY 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  FAILS  TO  OPEN,  BURST  DISK 

FAILS  TO  RUPTURE,  RELIEF  VALVE  FAILS  TO  OPEN 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PRESSURE  RELIEF  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF; 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO; 

1/1 

LANDING/ SAFING; 

1/1 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  MC284-0421-0015, -0016 

CAUSES:  MANUFACTURING  DEFECT,  MATERIAL  DEFECT 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF  PROP  TANKS  AND  LINES 
RESULTING  IN  FIRE/ EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014  #213,  214  2)  VS70-431099  3)  MC284- 

0421  4)  VS70-943099,43AA,BA  5)  JSC  11174,11.3  6)  JSC  12770 


REPORT  DATE  02/05/87 


C-43 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

142 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

2/lR 


VALVE-PRESSURE  RELIEF  ASSEMBLY 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  BURST  DISK  RUPTURES  AT 

LOWER  THAN  BURST  PRESSURE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PRESSURE  RELIEF  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/S AFING : 

REDUNDANCY  SCREENS; 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

2/lR 

RTLS: 

2/lR 

2/lR 

TAL: 

2/lR 

2/lR 

AOA: 

2/lR 

2/lR 

2/lR 

ATO; 

2/lR 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  MC284-0421-0015,-0016 


CAUSES;  MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  PRESSURE  SURGE 
EFFECTS/RATIONALE ; 

rupture  OF  BURST  DISK,  ONE  FAILURE  (PREMATURE 

CLOSE,  OR  INTERNAL  LEAKAGE  OF  RELIEF  VALVE) 
life/vehicle  DUE  TO  LOSS  AND  LEAKAG^OF 
THROUGH  ASSY.  LOSS  OF  HELIUM  PRESSURANT, 
INABILITY  TO  MAINTAIN  TANK  PRESSURE,  AND  SUBSEQUENT  INABILITY  TO 
a^/DEPLETE  PROP  RESULT  IN  POSSIBIi  VIOIATIOHS  OF  PRSriANfK 

ORBITER  MASS  PROPERTIES  CONSTRAINTS.  LEAKAGE  OF 
PROP  RESULTS  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014  #213,  214  2)  VS70-431099 

0421  4)  VS70-943099,43AA,BA  5)  JSC  11174,11.3  6) 


3)  MC284- 
JSC  12770 


REPORT  DATE  02/05/87 


C-44 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

143 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  2/lR 


ITEM;  VALVE-PRESSURE  RELIEF  ASSEMBLY 

FAILURE  MODE;  BURST  DISK  LEAK,  INTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PRESSURE  RELIEF  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


2/lR 

2/lR 

2/lR 

2/lR 

2/lR 


RTLS: 
TAL: 
AO  A: 
ATO: 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


REDUNDANCY  SCREENS:  A [ 1 ] B [NA  ] 


C [ P ] 


LOCATION: 

PART  NUMBER:  MC284-042 1-0015, -0016 


CAUSES;  MATERIAL  DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

WITH  LEAKAGE  OF  BURST  DISK,  ONE  FAILURE  (PREMATURE  OPENING  OR 
INTERNAL  LEAKAGE  OF  RELIEF  VALVE)  AWAY  FROM  POSSIBLE  LOSS 
LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP  AND  HELIUM  THROUGH 
ASSEMBLY.  LOSS  OF  HELIUM  PRESSURANT,  INABILITY  TO  MAINTAIN  TANK 
PRESSURE,  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULT  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS.  LEAKAGE  OF  PROP  RESULTS  IN 
FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 

REFERENCES:  1)  73A000014  #213,  214  2)  VS70-431099  3)  MC284- 

0421  4)  VS70-943099,43AA,BA  5)  JSC  11174,11.3  6)  JSC  12770 


REPORT  DATE  02/05/87 


C-45 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

144 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  VALVE-PRESSURE  RELIEF  ASSEMBLY 

FAILURE  MODE;  FAILS  TO  CLOSE,  RELIEF  VALVE  FAILS  TO  RESEAT 

(OPENS  AFTER  BURST  DISK  RUPTURE) 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


HARDWARE  COMPONENTS 
ASSEMBLIES 

PROP  STOR  & DIST  SUBSYSTEM 
PRESSURE  RELIEF  ASSEMBLY 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

1/1 

RTLS 

LIFTOFF; 

1/1 

TAL: 

ONORBIT; 

1/1 

AOA: 

DEORBIT; 

1/1 

ATO; 

LANDING/SAFING; 

1/1 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [ ] B [ 


C [ ] 


LOCATION: 

PART  NUMBER:  MC284-0421-0015, -0016 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MANUFACTURING  DEFECT 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  CAUSES  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
AND  LEAKAGE  OF  PROPELLANT  AND  HELIUM  PRESSURANT  RESULTING  IN 
INABILITY  TO  MAINTAIN  TANK  PRESSURE  AND  SUBSEQUENT  INABILITY 
TO  USE/DEPLETE  PROP  CAUSING  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS.  LEAKAGE  OF 
PROP  RESULTS  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES;  1)  73A000014  #213,  214  2)  VS70-431099  3)  MC284- 

0421  4)  VS70-943099,43AA,BA  5)  JSC  11174,11.3  6)  JSC  12770 


REPORT  DATE  02/05/87 


C-46 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/15/86 

OMS 

145 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM;  VALVE-PRESSURE  RELIEF  ASSEMBLY 

FAILURE  MODE;  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PRESSURE  RELIEF  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


1/1 

1/1 

1/1 

1/1 

1/1 


RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS;  A [ ] B 


C [ ] 


LOCATION: 

PART  NUMBER;  MC284-0421-0015, -0016 

CAUSES;  HOUSING  STRUCTURAL  FAILURE,  WELD  FAILURE,  MATERIAL 
DEFECT,  MANUFACTURING  DEFECT,  HIGH  PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  CAUSES  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
AND  LEAKAGE  OF  PROPELLANT  AND  HELIUM  PRESSURANT  RESULTING  IN 
INABILITY  TO  MAINTAIN  TANK  PRESSURE  AND  SUBSEQUENT  INABILITY 
TO  USE/DEPLETE  PROP  CAUSING  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS.  LEAKAGE  OF 
PROP  RESULTS  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014  #213,  214  2)  VS70-431099  3)  MC284- 

0421  4)  VS70-943099,43AA,BA  5)  JSC  11174,11.3  6)  JSC  12770 


REPORT  DATE  02/05/87 


C-47 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

146 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  COUPLING-TEST  PORT,  PRESSURE  RELIEF  VALVE 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  RELIEF  VALVE  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGirr  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF; 

3/lR 

TAL: 

3/lR 

ONORBIT: 

3/lR 

AOA: 

3/lR 

DEORBIT; 

LANDING/SAFING: 

3/lR 

3/lR 

ATO: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  ME276-0032-0005, -0007 


CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 


EFFECTS/RATIONALE : 

FAILURE  OF  FIRST  SEAL  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP  AND 
HELIUM  PRESSURANT,  INABILITY  T0‘  MAINTAIN  TANK  PRESSURE,  AND 
SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS  DURING  ENTRY.  LEAKAGE  OF  PROP  RESULTS  IN 
FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014  #215-3,  216-3  2)  VS70-431099  3) 

MC621-0059  4)  ME276-0032  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AA, BA 


REPORT  DATE  02/05/87 


C-48 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

147 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-TEST  PORT,  PRESSURE  RELIEF  VALVE 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  RELIEF  VALVE  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  ME276-0032-0005, -0007 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  #215-3,  216-3  2)  VS70-431099  3) 

MC621-0059  4)  ME276-0032  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AA, BA 


REPORT  DATE  02/05/87 


C-49 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

148 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 


COUPLING-TEST  PORT,  PRESSURE  RELIEF  VALVE 
FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  RELIEF  VALVE  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


HDW/FUNC 
3/3 
/NA 
/NA 
/NA 
3/3 


CRITICALITIES 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 


LOCATION: 

PART  NUMBER:  ME276-0032-0005, -0007 


HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


C [ ] 


CAUSES:  FILTER  BLOCKAGE,  PIECE-PART 

PROCEDURAL  ERROR,  CONTAMINATION 


STRUCTURAL  FAILURE, 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


^FE^NCES:  1)  73A000014  #215-3,  216-3  2)  VS70-431099  3) 

94309^3M,b1  11174,u!3  6)  VS70- 


REPORT  DATE  02/05/87 


C-50 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/30/86 

OMS 

149 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  1/1 

ABORT;  1/1 


ITEM;  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS-MMH  AND 

NTO 

FAILURE  MODE;  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  MMH  AND  NTO  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

1/1 

RTLS; 

1/1 

LIFTOFF; 

1/1 

TAL; 

1/1 

ONORBIT; 

1/1 

AOA: 

1/1 

DEORBIT; 

1/1 

ATO; 

1/1 

LANDING/SAFING; 

1/1 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER;  MC62 1-0059 


CAUSES;  FILTER  BLOCKAGE,  CONTAMINATION 
EFFECTS/RATIONALE : 

RELIEF  VALVE  INLET  AND  OUTLET  LINES.  FIRST  FAILURE  IS  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE 
RUPTURE  OF  PROP  TANK  AND  LINES  RESULTING  IN  LOSS  AND  LEAKAGE  OF 
PROP,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES;  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-51 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

150 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING-TEST  PORT,  PROPELLANT  PRESSURE  CHECK 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  PRESSURE  CHECK  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

2/lR 

LIFTOFF; 

2/lR 

TAL: 

2/lR 

ONORBIT: 

2/lR 

AOA: 

2/lR 

DEORBIT; 
LANDING/SAFING ; 

2/lR 

2/lR 

ATO; 

2/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3801,-3851 


CAUSES; 

FAILURE, 

PRESSURE 


SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 
MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 


EFFECTS/RATIONALE : 

WITH  FAILURE  OF  FIRST  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 

life/vehicle  due  to  loss  and  leakage  of  prop  AND 
HELIUM  PRESSURANT,  INABILITY  TO  MAINTAIN  TANK  ULLAGE  PRESSURE. 

AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS  DURING  ENTRY.  LEAKAGE  OF  PROP  RESULTS  IN 
FIRE/ EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014  #217,  218  2)  VS70-431099  3)  MC621- 

0059  4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-52 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/15/86 

OMS 

151 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/3 

/NA 


ITEM;  COUPLING-TEST  PORT,  PROPELLANT  PRESSURE  CHECK 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  PRESSURE  CHECK  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT; 

/NA 

AOA: 

/NA 

DEORBIT; 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER;  MC276-0018-3801, -3851 

CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 
MISHANDLING 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  73A000014  #217,  218  2)  VS70-431099  3)  MC621- 

0059  4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-53 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID; 


12/15/86 

OMS 

152 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/3 

/NA 


ITEM; 

FAILURE  MODE; 


COUPLING-TEST  PORT,  PROPELLANT  PRESSURE  CHECK 
FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  PRESSURE  CHECK  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING : 

HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

3/3 

ABORT 

RTLS; 

TAL; 

AOA: 

ATO: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3801,-3851 


CAUSES;  FILTER  BLOCKAGE,  PIECE-PART 
PROCEDURAL  ERROR,  CONTAMINATION 


STRUCTURAL  FAILURE, 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  73A000014  #217,  218  2) 

0059  4)  MC276-0018  5)  JSC  11174,11.3 


VS70-431099  3)  MC621- 

6)  VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-54 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

153 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  VALVE-GROUND,  MANUAL  ISOLATION 

FAILURE  MODE:  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GROUND  MANUAL  ISOLATION  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

2/2 

TAL: 

ONORBIT: 

2/2 

AO  A: 

DEORBIT: 

1/1 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [ ] B [ 


C [ ] 


LOCATION: 

PART  NUMBER:  MC284-0480-0001,-0002 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 

DEFECT,  PROCEDURAL  ERROR 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING 
ENTRY  DtJE  TO  INABILITY  TO  REPRESSURIZE  PROP  TANK  AND  INABILITY  TO 
USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014  #211,  #212  2)  VS70-431099  3)  MC284- 

480  4)  VS70-943099,43AA,BA  5)  JSC  11174,11.3  6)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-55 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

154 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  VALVE-GROUND,  MANUAL  ISOLATION 

FAILURE  MODE:  FAILS  TO  CLOSE,  INTERNAL  LEAKAGE,  FAILS  TO  REMAIN 

CLOSED,  FAILS  TO  OPEN 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GROUND  MANUAL  ISOLATION  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS: 

A [ ] . 

B C ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC284-0480-0001,-0002 


^USES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 

DEFECT,  PROCEDURAL  ERROR 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  #211, 

480  4)  VS70-943099,43AA,BA  5) 


#212  2)  VS70-431099  3)  MC284- 

JSC  11174,11.3  6)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-56 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

155 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  VALVE-GROUND,  MANUAL  ISOLATION 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GROUND  MANUAL  ISOLATION  VALVE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS; 

1/1 

LIFTOFF; 

1/1 

TAL: 

1/1 

ONORBIT; 

1/1 

AOA: 

1/1 

DEORBIT; 

1/1 

ATO: 

1/1 

LANDING/ SAFING: 

1/1 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER:  MC284-0480-0001,-0002 

CAUSES;  HOUSING  STRUCTURAL  FAILURE,  WELD  FAILURE,  MATERIAL 
DEFECT,  MANUFACTURING  DEFECT,  BELLOWS  FAILURE,  SEAL  FAILURES, 
HIGH  PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE 
TO  LOSS  OF  HELIUM  PRESSURANT  AND  INABILITY  TO  MAINTAIN  TANK 
PRESSURE  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL 
AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS.  MAY  ALSO  ALLOW  LOSS  AND 
LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW. 


REFERENCES:  1)  73A000014  #211,  #212  2)  VS70-431099  3)  MC284- 

480  4)  VS70-943099,43AA,BA  5)  JSC  11174,11.3  6)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-57 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

2/lR 

2/lR 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  TANK  VENT  COUPLING 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


12/15/86 

OMS 

156 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM; 

FAILURE  MODE: 


COUPLING-TANK  VENT 
EXTERNAL  LEAKAGE 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING : 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 

2/lR 

ABORT 

RTLS: 

TAL; 

AOA: 

ATO: 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER;  MC276-0018-3802,-3852 


CAUSES; 

FAILURE, 

PRESSURE 


SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 
MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 


EFFECTS/RATIONALE ; 

OF  first  seal,  one  failure  (CAP  SEAL)  AWAY  FROM 

LIFE/VEHICLE  due  to  loss  and  leakage  of  prop  AND 
HELIUM  PRESSURANT,  INABILITY  TO  MAINTAIN  TANK  PRESSURE,  AND 

INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS  DURING  ENTRY.  LEAKAGE  OF  PROP  RESULTS  IN 
FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES;  1)  73A000014  #219,  220  2)  VS70-431099  3)  MC276- 

0018  4)JSC  11174,11.3  5)  VS70-943099, 43AA, BA  6)  MC621-0059 


REPORT  DATE  02/05/87 


C-58 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

157 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  /NA 


ITEM;  COUPLING-TANK  VENT 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  TANK  VENT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

/NA 

LIFTOFF; 

/NA 

TAL; 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT; 

/NA 

ATO; 

/NA 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c t ] 

LOCATION; 

PART  NUMBER;  MC276-0018-3802 , -3852 

CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 
MISHANDLING 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  73A000014  #219,  220  2)  VS70-431099  3)  MC276- 

0018  4)JSC  11174,11.3  5)  VS70-943099,43AA,BA  6)  MC621-0059 


REPORT  DATE  02/05/87 


C-59 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

158 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 


COUPLING-TANK  VENT 

FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
ASSEMBLIES 

PROP  STOR  & DIST  SUBSYSTEM 
PROPELLANT  TANK  VENT  COUPLING 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC  ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

/NA 

TAL: 

ONORBIT: 

/NA 

AOA: 

DEORBIT: 

/NA 

ATO: 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] B [ 

] 

LOCATION; 

PART  NUMBER;  MC276-0018-3802,-3852 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


C [ ] 


CAUSES:  FILTER  BLOCKAGE,  PIECE-PART 

PROCEDURAL  ERROR,  CONTAMINATION 


STRUCTURAL  FAILURE, 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  #219,  220  2)  VS70-431099 

0018  4)JSC  11174,11.3  5)  VS70-943099, 43AA,  BA  6) 


3)  MC276- 
MC621-0059 


REPORT  DATE  02/05/87 


C-60 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  12/30/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  OMS  FLIGHT;  1/1 

MDAC  ID;  159  ABORT:  1/1 

ITEM:  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 

NTO 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  MMH  AND  NTO  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

1/1 

LIFTOFF; 

2/2 

TAL; 

1/1 

ONORBIT: 

2/2 

AOA: 

1/1 

DEORBIT; 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A C ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER;  MC621-0059 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE : 

QUAD  CHECK  VALVES  TO  TANK;  TANK  TO  ISOL  VALVE  LEGS;  ISOL  VALVE 
LEGS  TO  XFEED  LINE  CONNECTION.  FIRST  FAILURE  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DURING  ENTRY  DUE  TO  INABILITY  TO  USE/DEPLETE  PROP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-61 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

12/16/86 

OMS 

160 

HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 

HDW/FUNC 

1/1 

1/1 

ITEM: 

GIMBAL  BELLOWS 

FAILURE  MODE:  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS: 

1/1 

TAL: 

1/1 

AOA: 

1/1 

ATO: 

1/1 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [ 

LOCATION: 

PART  NUMBER:  73P550015 


CAUSES:  PIECE-PART  STRUCTURAL 
FAILURE,  MANUFACTURING  DEFECT, 
HIGH  PRESSURE 


FAILURE,  MATERIAL  DEFECT,  WELD 
MISHANDLING,  MECHANICAL  SHOCK, 


EFFECTS/RATIONALE : 

^^TED  BETWEEN  GROUND  MANUAL  ISOL  VALVE  AND  PROP  TANK.  FIRST 
FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE 
PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  MD 


REFERENCES:  1)  73A000014,  #267  2)  VS70-431099  3)  VS70- 

94 3 099, 4 3AA, BA  4)  73P550015  ^ 


REPORT  DATE  02/05/87 


C-62 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

161 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  GIMBAL  BELLOWS 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  PHYSICAL  BINDING/JAMMING, 

NO  BELLOWS  ANGULAR  DEFLECTION 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/SAFING: 

1/1 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c t ] 

LOCATION: 

PART  NUMBER:  73P550015 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MANUFACTURING  DEFECT, 

MECHANICAL  SHOCK,  MISHANDLING,  CONTAMINATION 

EFFECTS/RATIONALE : 

LOCATED  BETWEEN  GROtJND  MANUAL  ISOL  VALVE  AND  PROP  TANK.  FAILURE 
OF  A BELLOWS  TO  PROVIDE  ANGULAR  COMPENSATION  FOR  LINE  MOVEMENTS 
COULD  RESULT  IN  POSSIBLE  LINE  RUPTURE  RESULTING  IN  LOSS  AND 
LEAKAGE  OF  PROP,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND 
CREW. 


REFERENCES:  1)  73A000014,  #267  2)  VS70-431099  3)  VS70- 

943099, 43AA,BA  4)  73P550015 


REPORT  DATE  02/05/87 


C-63 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

162 


ITEM:  GIMBAL  BELLOWS 

FAILURE  MODE:  RESTRICTED  FLOW 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT;  1/1 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH; 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL; 

1/1 

ONORBIT: 

2/2 

AO  A: 

1/1 

DEORBIT; 

LANDING/SAFING; 

1/1 

3/3 

ATO: 

1/1 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER:  73P550015 


CAUSES;  CONTAMINATION 


EFFECTS/RATIONALE : 

LOCATED  BETWEEN  GROUND  MANUAL  ISOL  VALVE  AND  PROP  TANK.  FLOW 
RESTRICTION  IN  BELLOWS  AT  THIS  LOCATION  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DURING  ENTRY  DUE  TO  INABILITY  TO  MAINTAIN  TANK 
PRESSURE  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING 
IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014,  #267  2)  VS70-431099  3)  VS70- 

943099, 43AA,BA  4)  73P550015  5)  FLIGHT  RULE  6-1, B 


REPORT  DATE  02/05/87 


C-64 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/15/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

1/1 

MDAC  ID: 

163 

ABORT: 

1/1 

ITEM: 

PROPELLANT  TANK 

FAILURE  MODE:  RUPTURE 

LEAD  ANALYST:  C.D.  PRUST 

SUBSYS  LEAD: 

D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  TANK 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AO  A: 

1/1 

DEORBIT: 

1/1 

ATO; 

1/1 

LANDING/ SAFING: 

1/1 

REDUNDANCY  SCREENS: 

A C ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  73P550013 

CAUSES:  STRUCTURAL  FAILURE,  HIGH  PRESSURE,  SEAL  FAILURES,  WELD 

FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MISHANDLING,  HIGH 
PROP  LOAD  DURING  ENTRY 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE.  RUPTURE  RESULTS 
IN  LOSS  OF  PROPELLANT,  POSSIBLE  POD  STRUCTURAL  DAMAGE,  CORROSIVE 
EFFECTS  ON  POD  COMPONENTS,  POSSIBLE  FIRE/EXPLOSION  HAZARD,  AND 
HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014  #251,  252  2)  VS70-431099  3)  73P550013 

4)  MC621-0059  5)  73A740000  6)  JSC  11174,11.3  7)  VS70- 

943099, 43AA, BA  8)  JSC  12770 


REPORT  DATE  02/05/87 


C-65 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/09/86 

OMS 

164 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT;  1/1 


ITEM; 

FAILURE  MODE: 


PROPELLANT  TANK 

STRUCTURAL  FAILURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
ASSEMBLIES 

PROP  STOR  & DIST  SUBSYSTEM 
PROPELLANT  TANK 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 

LIFTOFF; 

ONORBIT: 

DEORBIT; 

LANDING/SAFING ; 

REDUNDANCY  SCREENS;  A [ ] 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

1/1 

RTLS; 

1/1 

1/1 

TAL; 

1/1 

1/1 

AOA; 

1/1 

1/1 

1/1 

ATO: 

1/1 

B C ] 


C [ ] 


LOCATION: 
PART  NUMBER: 


73P550013 


failure,  high  pressure,  seal  failures,  weld 

PRO^AD^URING  ENTRY^’’'  DEFECT,  MISHANDLING,  HIGH 

EFFECTS/RATIONALE ; 

POSSIBLE  LOSS  OF  LIFE/VEHICLE.  RUPTURE  RESULTS 
IN  LOSS  OF  PROPELLANT,  CORROSIVE  EFFECTS  ON  POD  COMPONENTS 
POSSIBLE  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW.  ’ 


REFERENCES:  1)  73A000014  #251, 

4)  MC621-0059  5)  73A740000  6) 

943099, 43AA,  BA  8)  JSC  12770 


252  2)  VS70-431099  3)  73P550013 

JSC  11174,11.3  7)  VS70- 


REPORT  DATE  02/05/87 


C-66 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID; 


12/16/86 

OMS 

165 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM;  COUPLING-PROP  TANK,  HORIZONTAL  DRAIN  PORT 

FAILURE  MODE;  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  TANK  HORIZONTAL  DRAIN  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

2/lR 

RTLS; 

2/lR 

LIFTOFF: 

2/lR 

TAL: 

2/lR 

ONORBIT: 

2/lR 

AOA: 

2/lR 

DEORBIT; 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER;  MC276-0018-3801, -3851 

CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 

EFFECTS/RATIONALE ; 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP  AND 
HELIUM  PRESSURANT,  INABILITY  TO  MAINTAIN  TANK  ULLAGE  PRESSURE, 

AND  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS  DURING  ENTRY.  LEAKAGE  OF  PROP  RESULTS  IN 
FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES;  1)  73A000014  #237,  238  2)  VS70-431099  3)  73P550003 

4)  MC621-0059  5)  MC276-0018  6)  JSC  11174,11.3  7)  VS70- 

943099, 43AA, BA 


REPORT  DATE  02/05/87 


C-67 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

166 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 


COUPLING-PROP  TANK,  HORIZONTAL  DRAIN  PORT 
FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  TANK  HORIZONTAL  DRAIN  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/ SAFING ; 

HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER:  MC276-0018-3801, -3851 


MIS^DLING^^^”^^^  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 
EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  #237,  238 

4)  MC621-0059  5)  MC276-0018  6)  JSC 

943099, 43AA, BA 


2)  VS70-431099  3)  73P550003 

11174,11.3  7)  VS70- 


REPORT  DATE  02/05/87 


C-68 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
/NA 


FLOW 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  TANK  HORIZONTAL  DRAIN  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

167 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  COUPLING-PROP  TANK,  HORIZONTAL  DRAIN  PORT 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3801, -3851 

CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDtJRAL  ERROR,  CONTAMINATION 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  #237,  238  2)  VS70-431099  3)  73P550003 

4)  MC621-0059  5)  MC276-0018  6)  JSC  11174,11.3  7)  VS70- 

943099, 43AA, BA 


REPORT  DATE  02/05/87 


C-69 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

168 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

2/lR 


ITEM: 

FAILURE  MODE: 


COUPLING-TANK  ACQ.  SYSTEM  TRAP  FILL/VENT  PORT 
EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  ACQUISITION  ASSEMBLY 

5)  TANK  ACQ.  SYSTEM  TRAP  FILL/VENT  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 

2/lR 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3403,-3453 


CAUSES: 

FAILURE, 

PRESSURE 


SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 
MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 


EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
AND  LOSS  OF  HELIUM  PRESSURANT  CAUSING  INABILITY  TO  MAINTAIN  TANK 
PRESSURE  AND  SUBSEQUENT  INABILITY  TO  USE/ DEPLETE  PROP  RESULTING 
IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS  DURING  ENTRY.  LEAKAGE  OF  PROP  RESULTS  IN 
FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A00014  #239,  240  2)  VS70-431099  3)  73P550013 

4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-70 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

169 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 


COUPLING-TANK  ACQ.  SYSTEM  TRAP  FILL/VENT  PORT 
FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  ACQUISITION  ASSEMBLY 

5)  TANK  ACQ.  SYSTEM  TRAP  FILL/VENT  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER:  MC276-0018-3403,-3453 

CAUSES:  PIECE -PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  73A00014  #239,  240  2)  VS70-431099  3)  73P550013 

4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70-943099, 43AA,  BA 


REPORT  DATE  02/05/87 


C-71 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


12/16/86 

OMS 

170 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  /NA 


ITEM; 

FAILURE  MODE; 


COUPLING-TANK  ACQ.  SYSTEM  TRAP  FILL/VENT  PORT 
FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  ACQUISITION  ASSEMBLY 

5)  TANK  ACQ.  SYSTEM  TRAP  FILL/VENT  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

/NA 

TAL; 

ONORBIT; 

/NA 

AOA: 

DEORBIT; 

/NA 

ATO; 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] B 

[ ] 

LOCATION; 

PART  NUMBER;  MC276-0018-3403,-3453 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


C [ ] 


CAUSES;  FILTER  BLOCKAGE,  PIECE-PART 
PROCEDURAL  ERROR,  CONTAMINATION 


STRUCTURAL  FAILURE, 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  73A00014  #239,  240 
4)  MC276-0018  5)  JSC  11174,11.3  6) 


2)  VS70-431099  3)  73P550013 

VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-72 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

171 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING-TANK  ACQ.  SYSTEM  FILL/ VENT  PORT 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  ACQUISITION  ASSEMBLY 

5)  TANK  ACQ.  SYSTEM  FILL/VENT  PORT  COUPLING 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS; 

2/lR 

LIFTOFF: 

2/lR 

TAL: 

2/lR 

ONORBIT: 

2/lR 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING; 

2/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  MC276-0018-3403, -3453 

CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 

EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
AND  LOSS  OF  HELIUM  PRESSURANT  CAUSING  INABILITY  TO  MAINTAIN  TANK 
PRESSURE  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROP  RESULTING 
IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS  DURING  ENTRY.  LEAKAGE  OF  PROP  RESULTS  IN 
FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 

REFERENCES;  1)  73A00014  #226,  227  2)  VS70-431099  3)  73P550013 

4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70-943099, 43AA,  BA 


REPORT  DATE  02/05/87 


C-73 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

172 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  /NA 


ITEM:  COUPLING-TANK  ACQ.  SYSTEM  FILL/ VENT  PORT 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  ACQUISITION  ASSEMBLY 

5)  TANK  ACQ.  SYSTEM  FILL/VENT  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

/NA 

LIFTOFF; 

/NA 

TAL; 

/NA 

ONORBIT; 

/NA 

AOA: 

/NA 

DEORBIT; 
LANDING/S AFING; 

/NA 

3/3 

ATO: 

/NA 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER;  MC276-0018-3403,-3453 


CAUSES:  PIECE-PART  STRUCTURAL  FAILtJRE,  PROCEDURAL  ERROR, 

MISHANDLING 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  73A00014  #226,  227  2)  VS70-431099  3)  73P550013 

4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-74 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

173 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-TANK  ACQ.  SYSTEM  FILL/ VENT  PORT 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  ACQUISITION  ASSEMBLY 

5)  TANK  ACQ.  SYSTEM  FILL/VENT  PORT  COUPLING 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF; 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT; 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER;  MC276-0018-3403 , -3453 

CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A00014  #226,  227  2)  VS70-431099  3)  73P550013 

4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70-943099,43AA,BA 


REPORT  DATE  02/05/87 


C-75 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

174 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING-PROPELLANT,  TANK  TEST  PORT 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  TANK  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FtJNC 

PRELAUNCH: 

2/lR 

RTLS: 

2/lR 

LIFTOFF; 

2/lR 

TAL: 

2/lR 

ONORBIT; 

2/lR 

AOA: 

2/lR 

DEORBIT; 
LANDING/S AFING ; 

2/lR 

2/lR 

ATO: 

2/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3401,-3451 


CAUSES: 

FAILURE, 

PRESSURE 


SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 
MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 


EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014  #215-4,  216-4  2)  VS70-431099  3) 

MC621-0059  4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AA, BA  * 


REPORT  DATE  02/05/87 


C-76 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

175 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-PROPELLANT,  TANK  TEST  PORT 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  TANK  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3401,-3451 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  #215-4,  216-4  2)  VS70-431099  3) 

MC621-0059  4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AA, BA 


REPORT  DATE  02/05/87 


C-77 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

176 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 


COUPLING-PROPELLANT,  TANK  TEST  PORT 

FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  TANK  TEST  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING ; 


CRITICALITIES 


HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO; 


REDUNDANCY  SCREENS:  A [ 


B C ] 


LOCATION; 

PART  NUMBER;  MC276-0018-3401,-3451 


HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


C t ] 


CAUSES:  FILTER  BLOCKAGE,  PIECE-PART 

PROCEDURAL  ERROR,  CONTAMINATION 


STRUCTURAL  FAILURE, 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1) 

MC621-0059  4) 

943099, 43AA, BA 


73A000014  #215-4,  216-4  2) 

MC276-0018  5)  JSC  11174,11.3 


VS70-431099 
6)  VS70- 


3) 


REPORT  DATE  02/05/87 


C-78 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
3/3 
3/3 

ITEM:  GAGING  PROBE,  FORWARD  COMPARMENT 

FAILURE  MODE:  LOSS  OF  OUTPUT 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

177 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  FORWARD  COMPARTMENT  GAGING  PROBE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  73P880001 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MISHANDLING,  LOSS  OF  INPUT  POWER,  MANUFACTURING  DEFECT,  MATERIAL 
DEFECT,  WELD  FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  OUTPUT  IS  NO  EFFECT.  REDUNDANCY  IS  PROVIDED  BY  ABILITY 
TO  USE  PVT  METHOD  TO  DETERMINE  TOTAL  PROP  QUANTITY.  OMS 
PROPELLANT  QUANTITIES  ARE  ALSO  TRACKED  BY  GROUND  PERSONNEL  BASED 
ON  ENGINE  PERFORMANCE  PARAMETERS  AND  FIRING  DURATION. 


REFERENCES:  1)  VS70-431099  #253,  254  2)  73A000014  3)  73P880001 

4)  JSC  19950  5)  JSC  18958  6)  JSC  12770  7)  JSC  11174,11.2  8) 

TM-ES86009-43 


REPORT  DATE  02/05/87 


C-79 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
3/3 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

178 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


GAGING  PROBE,  FORWARD  COMPARMENT 
ERRONEOUS  INDICATION 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  FORWARD  COMPARTMENT  GAGING  PROBE 
®) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

LOCATION: 
PART  NUMBER: 


A [ 
73P880001 


B [ ] 


C [ ] 


PIECE-PART  STRUCTURAL  FAILURE, 

DEFECT,  ^LD  FaSu^^  MANUFACTURING  DEFECT,  MATERIAL 

effects/rationAle : 

ERRONEOUS  INDICATION  IS  NO  EFFECT.  REDUNDANCY  IS  PROVIDED  BY 

METHOD  TO  DETERMINE  TOTAL  PROP  QUANTITY. 
quantities  are  also  tracked  by  ground  PERSONNEL 
BASED  ON  ENGINE  PERFORMANCE  PARAMETERS  AND  FIRING  DURATION. 


REFERENCES:  1)  VS70-431099  #253,  254  2) 

4)  JSC  19950  5)  JSC  18958  6)  JSC  12770 

TM-ES86009-43 


73A000014  3)  73P880001 

7)  JSC  11174,11.2  8) 


REPORT  DATE  02/05/87 


C-80 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

179 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


GAGING  PROBE,  FORWARD  COMPARMENT 
ERRATIC  OPERATION 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  FORWARD  COMPARTMENT  GAGING  PROBE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ 3 

LOCATION: 

PART  NUMBER:  73P880001 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MISHANDLING,  IMPROPER  INPUT,  MANUFACTURING  DEFECT,  MATERIAL 
DEFECT,  WELD  FAILURE 


EFFECTS/RATIONALE : 

ERRATIC  OPERATION  IS  NO  EFFECT.  REDUNDANCY  IS  PROVIDED  BY 
ABILITY  TO  USE  PVT  METHOD  TO  DETERMINE  TOTAL  PROP  QUANTITY. 

OMS  PROPELLANT  QUANTITIES  ARE  ALSO  TRACKED  BY  GROUND  PERSONNEL 
BASED  ON  ENGINE  PERFORMANCE  PARAMETERS  AND  FIRING  DURATION. 


REFERENCES:  1)  VS70-431099  #253,  254  2)  73A000014  3)  73P880001 

4)  JSC  19950  5)  JSC  18958  6)  JSC  12770  7)  JSC  11174,11.2  8) 

TM-ES86009-43 


REPORT  DATE  02/05/87 


C-81 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

180 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  GAGING  PROBE,  FORWARD  COMPARMENT,  FUEL 

FAILURE  MODE:  STRUCTURAL  FAILURE,  GLASS  TUBE  FRACTURE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  FORWARD  COMPARTMENT  GAGING  PROBE,  FUEL 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

REDUNDANCY  SCREENS:  A [ ] 

LOCATION: 

PART  NUMBER:  73P880001 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


CAUSES: 

DEFECT 


IMPROPER  INSTALLATION,  STRUCTURAL  FAILURE,  MATERIAL 


EFFECTS/RATIONALE : 

NO  EFFECT.  FULL  SCALE  HIGH  READING.  GLASS  FRAGMENTS  NOT 
SUFFICIENT  TO  RESTRICT  FLOW  OF  PROP  THROUGH  COMMUNICATION  SCREEN 
CONFpEMENT  OF  ALL  BUT  SMALL  GLASS  FRAGMENTS  WITHIN  PROBE  HOUSING 
AND  LOW  G FORCES  PRECLUDE  DAMAGE  TO  COMMUNICATION  SCREENS. 


REFERENCES:  1)  VS70-431099  #253,  254  2) 

4)  JSC  19950  5)  JSC  18958  6)  JSC  12770 

TM-ES86009-43 


73A000014  3)  73P880001 

7)  JSC  11174,11.2  8) 


REPORT  DATE  02/05/87 


C-82 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/15/86 

OMS 

181 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


ITEM;  GAGING  PROBE,  FORWARD  COMPARMENT 

FAILURE  MODE:  INTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  FORWARD  COMPARTMENT  GAGING  PROBE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c C ] 

LOCATION: 

PART  NUMBER:  73P880001 

CAUSES:  BELLOWS  FAILURE,  BARRIER  AND  SEAL  FAILURES, 

MANUFACTURING  DEFECT,  MATERIAL  DEFECT 


EFFECTS/RATIONALE ; 

LEAKAGE  THROUGH  SEAL  ALLOWS  LEAKAGE  OF  PROP  INTO  ELECTRICAL 
CAVITY  RESULTING  IN  POSSIBLE  LOSS  OF  OR  ERRONEOUS  PROBE  OUTPUT. 
REDtJNDANCY  IS  PROVIDED  BY  ABILITY  TO  USE  PVT  METHOD  TO  DETERMINE 
TOTAL  PROP  QUANTITY.  OMS  PROPELLANT  QUANTITIES  ARE  ALSO  TRACKED 
BY  GROUND  PERSONNEL  BASED  ON  ENGINE  PERFORMANCE  PARAMETERS  AND 
FIRING  DURATION. 


REFERENCES:  1)  VS70-431099  #253,  254  2)  73A000014  3)  73P880001 

4)  JSC  19950  5)  JSC  18958  6)  JSC  12770  7)  JSC  11174,11.2  8) 

TM-ES86009-43 


REPORT  DATE  02/05/87 


C-83 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

3/3 

3/3 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  AFT  COMPARTMENT  GAGING  PROBE 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/15/86 

OMS 

182 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


ITEM; 

FAILURE  MODE: 


GAGING  PROBE,  AFT  COMPARTMENT 
LOSS  OF  OUTPUT 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A C ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER;  73P880001 


PIECE-PART  STRUCTURAL  FAILURE, 
LOSS  OF  INPUT  POWER,  MANUFACTURING  DEFECT 
DEFECT,  WELD  FAILURE 


MATERIAL 


EFFECTS/RATIONALE ; 

LOSS  OF  OUTPUT  IS  NO  EFFECT.  LOSS  OF  LOW  QUANTITY  WARNING  COULD 
ALLOW  HELIUM  INGESTION  AND  PROP  DEPLETION,  HOWEVER  P^ 

TRACKING  IS  SUCH  THAT  UNEXPECTED/UNDESIRED 
DEPLETION  OF  PROP  IS  UNCREDIBLE.  LOSS  OF  OUTPUT  COULD  ALLOW 

COMMUNICATION  SCREEN  AND  PASSAGE  OF  HELIUM  INTO  AFT 
UNDETECTED  (REQUIRES  MULTIPLE  FAILURES)T 
REDUNDANCY  PROVIDED  BY  PVT  METHOD  AND  GROUND  TRACKING. 


REFERENCES;  1)  VS70-431099  #250, 
4)  73A00014  5)  JSC  18958  6)  JSC 

TM-ES86009-43 


249  2)  73P880001  3)  JSC  19950 

12770  7)  JSC  11174,11.2  8) 


REPORT  DATE  02/05/87 


C-84 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

183 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  3/3 


ITEM;  GAGING  PROBE,  AFT  COMPARTMENT 

FAILURE  MODE:  ERRONEOUS  INDICATION 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  AFT  COMPARTMENT  GAGING  PROBE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER:  73P880001 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MISHANDLING,  IMPROPER  INPUT,  MANUFACTURING  DEFECT,  MATERIAL 
DEFECT,  WELD  FAILURE 


EFFECTS/RATIONALE : 

ERRONEOUS  INDICATION  OF  PROP  QUANTITY  OR  LOW  LEVEL  QUANTITY  IS  NO 
EFFECT.  PROP  MANAGEMENT  AND  TRACKING  IS  SUCH  THAT  ACTUAL  PROP 
QUANTITY  IS  KNOWN.  ERRONEOUS  INDICATION  OF  COMMUNICATION  SCREEN 
FAILURE  AND  HELIUM  PASSAGE  (LESS  THAN  FULL  AFT  COMPARTMENT 
READING  WITH  PROP  REMAINING  IN  FORWARD  COMPARTMENT)  MAY  RESULT  IN 
PERFORMANCE  OF  ULLAGE  BURNS  PRIOR  TO  OMS  BURNS  AND  POSSIBLE  LOSS 
OF  ON-ORBIT  INTERCONNECT  FROM  AFFECTED  TANK. 

REFERENCES:  1)  VS70-431099  #250,  249  2)  73P880001  3)  JSC  19950 

4)  73A00014  5)  JSC  18958  6)  JSC  12770  7)  JSC  11174,11.2  8) 

TM-ES86009-43 


REPORT  DATE  02/05/87 


C-85 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

3/3 

3/3 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  AFT  COMPARTMENT  GAGING  PROBE 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

184 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM; 

FAILURE  MODE; 


GAGING  PROBE,  AFT  COMPARTMENT 
ERRATIC  OPERATION 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS;  A [ 


LOCATION: 

PART  NUMBER:  73P880001 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


^USES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 

DEF^,°^^M  FAILU^^  input,  MANUFACTURING  DEFECT,  MATERIAL 


EFFECTS/RATIONALE ; 

ERRATIC  OPERATION  IS  NO  EFFECT.  LOSS  OF  LOW  QUANTITY  WARNING 

allow  helium  ingestion  and  prop  depletion,  however  prop 

TRACKING  IS  SUCH  THAT  UNEXPECTED/UNDESIRED 
PROP  IS  UNCREDIBLE.  LOSS  OF  OUTPUT  COULD  ALLOW 
COMMUNICATION  SCREEN  AND  PASSAGE  OF  HELIUM  INTO  AFT 
COMPARTMENT  TO  GO  UNDETECTED  (REQUIRES  MULTIPLE  FAILURES) 
REDUNDANCY  PROVIDED  BY  PVT  METHoS  AND  GROWD  tJLcKIN^ 


REFERENCES:  1)  VS70-431099  #250, 

4)  73A00014  5)  JSC  18958  6)  JSC 

TM-ES86009-43 


249  2)  73P880001  3)  JSC  19950 

12770  7)  JSC  11174,11.2  8) 


REPORT  DATE  02/05/87 


C-86 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
3/3 
3/3 

ITEM;  GAGING  PROBE,  AFT  COMPARTMENT,  FUEL 

FAILURE  MODE:  STRUCTURAL  FAILURE,  GLASS  TUBE  FRACTURE 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

185 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  AFT  COMPARTMENT  GAGING  PROBE,  FUEL 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL; 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ S AFING ; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION: 

PART  NUMBER:  73P880001 

CAUSES;  IMPROPER  INSTALLATION,  STRUCTURAL  FAILtJRE,  MATERIAL 
DEFECT 


EFFECTS/RATIONALE : 

NO  EFFECT.  FULL  SCALE  HIGH  READING.  GLASS  FRAGMENTS  NOT 
SUFFICIENT  TO  RESTRICT  FLOW  OF  PROP  THROUGH  GALLERY  SCREENS. 
CONFINEMENT  OF  ALL  BUT  SMALL  GLASS  FRAGMENTS  WITHIN  PROBE  OUTER 
HOUSING  AND  LOW  G FORCES  PRECLUDE  DAMAGE  TO  SCREENS. 


REFERENCES:  1)  VS70-431099  #250,  249  2)  73P880001  3)  JSC  19950 

4)  73A00014  5)  JSC  18958  6)  JSC  12770  7)  JSC  11174,11.2  8) 

TM-ES86009-43 


REPORT  DATE  02/05/87 


C-87 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

186 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  GAGING  PROBE,  AFT  COMPARTMENT 

FAILURE  MODE:  INTERNAL  LEAKAGE 


HDW/FUNC 

3/3 

3/3 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  AFT  COMPARTMENT  GAGING  PROBE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  73P880001 


CAUSES:  BELLOWS  FAILURE,  BARRIER  AND 

MANUFACTURING  DEFECT,  MATERIAL  DEFECT 


SEAL  FAILURES, 


EFFECTS/RATIONALE : 

LEAKAGE  THROUGH  SEAL  ALLOWS  LEAKAGE  OF  PROP  INTO  ELECTRICAL 

POSSIBLE  LOSS  OF  OR  ERROnSs  ^OBE  OOT 
REDUNDANCY  IS  PROVIDED  BY  ABILITY  TO  USE  PVT  METHOD  TO  DETERMINE 
PROP  QUANTITY.  OMS  PROPELLANT  QUANTITIES  ARE  ALSO  TRACKED 
BASED  ON  ENGINE  PERFORMANCE  PARAMETERS  AND 

r XKXNG  DURATION. 


REFERENCES:  1)  VS70-431099  #250, 

4)  73A00014  5)  JSC  18958  6)  JSC 

TM-ES86009-43 


249  2)  73P880001  3)  JSC  19950 

12770  7)  JSC  11174,11.2  8) 


REPORT  DATE  02/05/87 


C-88 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
3/3 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/05/87 

OMS 

187 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  TOTALIZER 

FAILURE  MODE:  LOSS  OF  OUTPUT 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  TOTALIZER 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  73P880001 

CAUSES:  LOSS  OF  INPUT  POWER,  CONTAMINATION,  MANUFACTURING 

DEFECT,  MISHANDLING,  PIECE-PART  FAILURE 


EFFECTS/RATIONALE : 

LOSS  OF  OUTPUT  IS  NO  EFFECT.  LOSS  OF  LOW  QUANTITY  WARNING  COULD 
ALLOW  HELIUM  INGESTION  AND  PROP  DEPLETION,  HOWEVER  PROP 
MANAGEMENT  AND  TRACKING  IS  SUCH  THAT  UNEXPEXTED/UNDESIRED 
DEPLETION  OF  PROP  IS  UNCREDIBLE.  LOSS  OF  OUTPUT  COULD  ALLOW 
FAILURE  OF  COMMUNICATION  SCREEN  AND  PASSAGE  OF  HELIUM  INTO  AFT 
COMPARTMENT  TO  GO  UNDETECTED  (REQUIRES  MULTIPLE  FAILURES). 


REFERENCES:  1)  73P880001  2)  JSC  12770  3)  JSC  11174,11.2  4) 

JSC  19950  5)  JSC  18958 


REPORT  DATE  02/05/87 


C-89 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  188 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


ITEM:  TOTALIZER 

FAILURE  MODE;  ERRONEOUS  INDICATION 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  TOTALIZER 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL; 

ONORBIT; 

3/3 

AO  A: 

DEORBIT; 
LANDING/ SAFING; 

3/3 

3/3 

ATO; 

REDUNDANCY  SCREENS;  A [ 
LOCATION; 

PART  NUMBER;  73P880001 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


CAUSES:  IMPROPER  INPUT,  CONTAMINATION,  MANUFACTURING  DEFECT 

MISHANDLING,  PIECE-PART  FAILURE  ' 


EFFECTS/RATIONALE : 

ERRONEOUS  INDICATIONS  OF  PROP  QUANTITY  OR  LOW  LEVEL  QUANTITY  ARE 

management  and  tracking  is  such  that  actual  prop 

QUANTITY  IS  KNOWN.  ERRONEOUS  INDICATION  OF  COMMUNICATION  SCREEN 
FAILURE  AND  PASSAGE  OF  HELIUM  WOULD  RESULT  IN  THE  PERFORMANCE  OF 
ULLAGE  BURNS  PRIOR  TO  OMS  BURNS  AND  POSSIBLE  LOSS  OF  INTERCONNECT 
CAPABILITY  FROM  AFFECTED  TANK. 


REFERENCES;  1)  73P880001  2)  JSC  12770  3)  JSC  11174,11.2  4) 

JSC  19950  5)  JSC  18958  ^ 


REPORT  DATE  02/05/87 


C-90 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

189 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  TOTALIZER 

FAILURE  MODE:  ERRATIC  OPERATION 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GAGING  ASSEMBLY 

5)  TOTALIZER 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  73P880001 


CAUSES:  IMPROPER  INPUT,  CONTAMINATION,  MANUFACTURING  DEFECT, 

MISHANDLING,  PIECE-PART  FAILURE 


EFFECTS/RATIONALE : 

ERRATIC  OPERATION  IS  NO  EFFECT.  LOSS  OF  LOW  QUANTITY  WARNING 
COULD  ALLOW  HELIUM  INGESTION  AND  PROP  DEPLETION,  HOWEVER  PROP 
MANAGEMENT  AND  TRACKING  IS  SUCH  THAT  UNEXPECTED/UNDESIRED 
DEPLETION  OF  PROP  IS  UNCREDIBLE.  LOSS  OF  OUTPUT  COULD  ALLOW 
FAILURE  OF  COMMUNICATION  SCREEN  AND  PASSAGE  OF  HELIUM  INTO  AFT 
COMPARTMENT  TO  GO  UNDETECTED  (REQUIRES  MULTIPLE  FAILURES). 


REFERENCES:  1)  73P880001  2)  JSC  12770  3)  JSC  11174,11.2  4) 

JSC  19950  5)  JSC  18958 


REPORT  DATE  02/05/87 


C-91 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/16/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT; 

2/2 

MDAC  ID: 

190 

ABORT; 

2/2 

ITEM: 

COMMUNICATION  SCREEN 

FAILURE  MODE:  STRUCTURAL  FAILURE,  LOSS  OF  RETENTION  CAPABILITY 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  ACQUISITION  ASSEMBLY 

5)  COMMUNICATION  SCREEN 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

2/2 

2/2 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

2/2 


REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION: 

PART  NUMBER:  73B740001 


CAUSES;  PIECE-PART  STRUCTURAL 
MATERIAL  DEFECT,  WELD  FAILURE, 


FAILURE,  MANUFACTURING  DEFECT, 
MISHANDLING 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  MISSION.  MIGRATION  OF  PROP  OUT 
OF  AFT  COMPARTMENT  COULD  RESULT  IN  HELIUM  INGESTION  UPON  ENGINE 
START  CAUSING  POSSIBLE  DAMAGE  TO  AND  LOSS  OF  ENGINE.  SETTLING 
BURN  REQUIRED  PRIOR  TO  FURTHER  USE  OF  AFFECTED  SYSTEM.  NO  EFFECT 
FOR  RTLS  AND  TAL  SINCE  PROP  FORCED  INTO  AFT  COMPARTMENT  AT  START 
OF  PROP  DUMP. 


REFERENCES:  1)  73B740001  2)  73A740000  3)  JSC  12770  4)  JSC 

18958  6)  FLIGHT  RULES  6-2, C,  6-44  7)  JSC  19950 


REPORT  DATE  02/05/87 


C-92 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
3/2R 
3/lR 

ITEM;  COMMUNICATION  SCREEN 

FAILURE  MODE;  STRUCTURAL  FAILURE,  HELIUM  PASSAGE 

LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/16/86 

OMS 

191 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  ACQUISITION  ASSEMBLY 

5)  COMMUNICATION  SCREEN 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/lR 

LIFTOFF; 

3/2R 

TAL; 

3/lR 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/2R 

LANDING/S AFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION; 

PART  NUMBER;  73B740001 

CAUSES;  PIECE-PART  STRUCTURAL 

FAILURE,  MANUFACTURING  DEFECT 

MATERIAL  DEFECT,  WELD 

FAILURE, 

MISHANDLING 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNANCY  RESULTS  IN 
POSSIBLE  LOSS  OF  MISSION  DUE  TO  POSSIBLE  DAMAGE  TO  AND  LOSS  OF 
ONE  ENGINE.  A SETTLING  BURN  WOULD  BE  REQUIRED  PRIOR  TO  FURTHER 
USE  OF  AFFECTED  TANK.  LOSS  OF  ALL  REDUNDANCY  DURING  RTLS  OR  TAL 
ABORT  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  POSSIBLE  LOSS  OF 
ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  1)  73B740001  2)  73A740000  3)  JSC  12770  4)  JSC 

18958  6)  FLIGHT  RULES  6-2, C,  6-44  7)  JSC  19950 


REPORT  DATE  02/05/87 


C-93 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/2R 
2/lR 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  ACQUISITION  ASSEMBLY 

5)  GALLERY  LEGS 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

192 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  GALLERY  LEGS 

FAILURE  MODE:  STRUCTURAL  FAILURE,  HELIUM  PASSAGE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS: 

3/2R 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/2R 


REDUNDANCY  SCREENS:  A [ 1 ] 

D3CATION: 

PART  NUMBER:  73B740004 


CAUSES:  PIECE-PART  STRUCTURAL 

MATERIAL  DEFECT,  WELD  FAILURE, 


FAILURE,  MANUFACTURING  DEFECT, 
MISHANDLING 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  RESULTS  TM 

ONE^FMrTMP  MISSION  DUE  TO  POSSIBLE  DAMAGE  TO  AND  LOSS  OF 

^ SETTLING  BURN  WOULD  BE  REQUIRED  PRIOR  TO  FURTHER 
failure  of  GALLERY  LEG  SCREEN  DURING 

OP  LTPP/VTOTrTP  (MANIFOLD  SCREEN)  AWAY  FROM  POSSIBLE  LOSS 

POSSIBLE  loss  OF  ENGINE  AND  POSSIBLE 
COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN 

ORBITER  MASS 


REFERENCES:  1)  73A740066  2)  73B740004  3) 

12770  5)  JSC  18958  6)  FLIGHT  RULES  6-2, C, 


73A740000 

6-44 


4)  JSC 


REPORT  DATE  02/05/87 


C-94 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

193 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/lR 


ITEM:  COLLECTOR  MANIFOLD 

FAILURE  MODE:  STRUCTURAL  FAILURE,  HELIUM  PASSAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  ACQUISITION  ASSEMBLY 

5)  COLLECTOR  MANIFOLD 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  73B740003 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MANUFACTURING  DEFECT, 

MATERIAL  DEFECT,  WELD  FAILURE,  MISHANDLING 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
POSSIBLE  LOSS  OF  MISSION  DUE  TO  POSSIBLE  DAMAGE  TO  AND  LOSS  OF 
ONE  ENGINE.  A SETTLING  BURN  WOULD  BE  REQUIRED  PRIOR  TO  FURTHER 
USE  OF  AFFECTED  TANK.  WITH  FAILURE  OF  MANIFOLD  SCREEN  DURING 
RTLS  OR  TAL,  ONE  FAILURE  (GALLERY  LEG  SCREEN)  AWAY  FROM  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  POSSIBLE  LOSS  OF  ENGINE  AND  POSSIBLE 
INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  73A740066  2)  73B740004  3)  73A740000  4)  JSC 

12770  5)  JSC  18958  6)  FLIGHT  RULES  6-2, C,  6-44 


REPORT  DATE  02/05/87 


C-95 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

12/30/86  HIGHEST  CRITICALITY  HDW/FUNC 

OMS  FLIGHT:  1/1 

ABORT:  1/1 

PROPELLANT  LINES  AND  MECHANICAL  FITTINGS-MMH  AND 

FAILURE  MODE:  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  MMH  AND  NTO  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

ITEM: 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL: 

1/1 

AOA: 

1/1 

ATO; 

1/1 

REDUNDANCY  SCREENS;  A [ 
LOCATION: 

PART  NUMBER:  MC62 1-0059 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [ ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE, 

FAILURE,  SEAL  FAILURES,  MATERIAL  DEFECT. 
HIGH  PRESSURE 


MECHANICAL  SHOCK,  WELD 
MANUFACTURING  DEFECT, 


EFFECTS/RATIONALE ; 

ALL  PROP  LINES  AND  MECHANICAL  FITTINGS.  FIRST  FAILURE  IS 

LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
ODTO  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562 

5622  5)  MB0160-007  ' 


4)  SAE 


REPORT  DATE  02/05/87 


C-96 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

195 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  GIMBAL  BELLOWS 

FAILURE  MODE:  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL; 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/ SAFING: 

1/1 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  73P550015 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT,  WELD 
FAILURE,  MANUFACTURING  DEFECT,  MISHANDLING,  MECHANICAL  SHOCK, 
HIGH  PRESSURE 


EFFECTS/RATIONALE : 

LOCATED  BETWEEN  PROP  TANK  AND  TANK  ISOL  VALVES.  FIRST  FAILURE  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014,  #268  2)  VS70-431099  3)  VS70- 

943099, 43AA,BA  4)  73P550015 


REPORT  DATE  02/05/87 


C-97 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


12/16/86 

OMS 

196 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  1/1 

ABORT;  1/1 


ITEM;  GIMBAL  BELLOWS 

FAILURE  MODE;  FAILS  OUT  OF  TOLERANCE 
NO  BELLOWS  ANGULAR  DEFLECTION 


, PHYSICAL  BINDING/ JAMMING 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

6) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

1/1 

RTLS 

1/1 

TAL; 

1/1 

AOA: 

1/1 

ATO; 

1/1 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS;  A [ ] 

LOCATION: 

PART  NUMBER;  73P550015 


CAUSES;  PIECE-PART  STRUCTURAL 
MECHANICAL  SHOCK,  MISHANDLING, 


FAILURE,  MANUFACTURING  DEFECT, 
CONTAMINATION 


EFFECTS/RATIONALE : 

WCATED  BETWEEN  PROP  TANK  AND  TANK  ISOL  VALVES.  FAILURE  OF  A 

provide  angular  compensation  for  prop  line  movements 

POSSIBLE  LINE  RUPTURE,  LOSS  AND  LEAKAGE  OF  PROP 
INTO  POD,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES;  1)  73A000014,  #268  2)  VS70-431099  3)  VS70- 

943099, 43AA, BA  4)  73P550015  ^ 


REPORT  DATE  02/05/87 


C-98 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/16/86 

QMS 

197 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  1/1 

ABORT;  1/1 


ITEM;  GIMBAL  BELLOWS 

FAILURE  MODE;  RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

1/1 

LIFTOFF: 

2/2 

TAL; 

1/1 

ONORBIT; 

2/2 

AOA: 

1/1 

DEORBIT; 

1/1 

ATO; 

1/1 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  73P550015 


CAUSES;  CONTAMINATION 


EFFECTS/RATIONALE : 

LOCATED  BETWEEN  PROP  TANK  AND  TANK  ISOL  VALVES.  RESTRICTION  IN 
BELLOWS  AT  THIS  LOCATION  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING 
ENTRY  DUE  TO  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES;  1)  73A000014,  #268  2)  VS70-431099  3)  VS70- 

943099, 43AA,BA  4)  73P550015 


REPORT  DATE  02/05/87 


C-99 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

198 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  VALVE-PROPELLANT  TANK  ISOLATION 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS; 

LIFTOFF:  3/2R  TAL; 

ONORBIT:  3/2R  AOA; 

DEORBIT;  2/lR  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


LOCATION; 

PART  NUMBER;  MC284-0430-0023,-0024 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  LOSS  OF  INPUT,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MISHANDLING 


EFFECTS/RATIONALE ; 

WITH  FAILURE  TO  OPEN  OF  ONE  TANK  ISLN  VALVE,  ONE  FAILURE  (FAILURE 
TO  OPEN  OF  OTHER  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DURING  ENTRY  DUE  TO  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014,  #257-1,-2,  258-1,-2 

3)  MC284-0430  4)  JSC  18958  5)  JSC  11174,11.3 

943099, 43AB,BB  7)  JSC  12770  8)  TM-ES86009-43 

2,B 


2)  VS70-431099 
6)  VS70- 

9)  FLIGHT  RULE  6- 


REPORT  DATE  02/05/87 


C-100 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/16/86 

OMS 

199 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM;  VALVE-PROPELLANT  TANK  ISOLATION 

FAILURE  MODE;  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION; 

PART  NUMBER:  MC284-0430-0023 , -0024 

CAUSES;  CONTAMINATION,  LOSS  OF  INPUT,  PIECE-PART  STRUCTURAL 
FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT.  VALVES  ARE  NORMALLY  OPEN  DURING  ALL  PHASES.  A FAILED 
OPEN  VALVE  COULD  RESULT  IN  LOSS  OF  CROSSFEED  CAPABILITY  TO 
AFFECTED  POD  (TO  AVOID  DIRECT  CONNECTION  OF  TANKS). 


REFERENCES;  1)  73A000014,  #257-1,-2,  258-1,-2  2)  VS70-431099 

3)  MC284-0430  4)  JSC  18958  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AB,BB  7)  JSC  12770  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-101 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

12/16/86  HIGHEST  CRITICALITY  HDW/FUNC 

QMS  FLIGHT:  2/lR 

200  ABORT:  2/lR 

VALVE-PROPELLANT  TANK  ISOLATION 
FAILURE  MODE:  FAILS  MIDTRAVEL,  PARTIALLY  OPEN/CLOSED 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

ITEM: 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AO  A: 

DEORBIT: 

2/lR 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

LOCATION: 

PART  NUMBER:  MC284-0430-0023,-0024 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


C [ P ] 


CAUSES: 

FAILURE, 


CONTAMINATION,  LOSS  OF  INPUT,  PIECE-PART  STRUCTURAL 
MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MISHANDLING 


EFFECTS/RATIONALE : 

WITH  ONE  VALVE  FAILED  MIDTRAVEL,  ONE  FAILURE  (FAILURE  TO  OPEN  OF 
OTHER  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY 
DUE  TO  INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS.  FLOW  RATE  INSUFFICIENT  TO  SUPPORT  BURN  MAKES  PROP 
IN  AFFECTED  TANK  UNUSABLE.  VALVE  FAILED  PARTIALLY  OPEN  COULD 

RESULT  IN  LOSS  OF  CROSSFEED  CAPABILITY  TO  AFFECTED  POD  (TO  AVOID 
DIRECT  CONNECTION  TO  TANKS).  avuxu 


REFERENCES:  1)  73A000014,  #257-1,-2,  258-1,-2 

3)  MC284-0430  4)  JSC  18958  5)  JSC  11174,11.3 

943099, 43AB, BA  7)  JSC  12770  8)  TM-ES86009-43 

2,B,D 


2)  VS70-431099 
6)  VS70- 

9)  FLIGHT  RULE  6- 


REPORT  DATE  02/05/87 


C-102 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

201 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  VALVE-PROPELLANT  TANK  ISOLATION 

FAILURE  MODE:  INTERNAL  LEAKAGE,  FORWARD/REVERSE  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC284-0430-0023,-0024 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  BALL  SEAL  FAILURES, 

RELIEF  VALVE  SEAL  FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT, 
CONTAMINATION 


EFFECTS/RATIONALE : 

NO  EFFECT.  INTERNAL  LEAKAGE  OF  VALVE  MAY  ALLOW  CONNECTION  OF 
TANKS  AT  DIFFERENT  PRESSURES  DURING  CROSSFEED  OPS  HOWEVER 
CONNECTION  THROUGH  CLOSED  LEAKING  VALVE  PRECLUDES  DAMAGE  TO  TANK 
FROM  PRESSURE  SURGE. 


REFERENCES:  1)  73A000014,  #257-1,-2,  258-1,-2  2)  VS70-431099 

3)  MC284-0430  4)  JSC  18958  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AB,BA  7)  JSC  12770  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-103 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/16/86 

SUBSYSTEM:  OMS 

MDAC  ID:  202 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  1/1 

ABORT;  1/1 


ITEM:  VALVE-PROPELLANT  TANK  ISOLATION 

FAILURE  MODE;  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

1/1 

RTLS; 

LIFTOFF; 

1/1 

TAL; 

ONORBIT; 

1/1 

AOA: 

DEORBIT: 

LANDING/SAFING; 

1/1 

1/1 

ATO: 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS;  A [ ] 

LOCATION: 

PART  NUMBER;  MC284-0430-0023,-0024 


CAUSES:  HOUSING  STRUCTURAL  FAILURE,  BELLOWS  AND  SEAL  FAILURES, 

MATERIAL  DEFECT,  WELD  FAILURE,  MANUFACTURING  DEFECT,  HIGH 
PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND 
LEAKAGE  OF  PROP  INTO  POD  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND 
HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014,  #257-1,-2,  258-1,-2  2)  VS70-431099 

3)  MC284-0430  4)  JSC  18958  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AB,BB  7)  JSC  12770  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-104 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
2/lR 
2/lR 

ITEM:  VALVE -PROPELLANT  TANK  ISOLATION 

FAILURE  MODE:  RESTRICTED  FLOW 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

203 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING; 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/2R 

3/2R 

2/lR 

3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


C [ P ] 


LOCATION: 

PART  NUMBER:  MC284-0430 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 


EFFECTS/RATIONALE : 

WITH  RESTRICTED  FLOW  IN  ONE  VALVE,  ONE  FAILURE  (FAILURE  TO  OPEN 
OR  RESTRICTED  FLOW  IN  OTHER  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DURING  ENTRY  DUE  TO  INABILITY  TO  USE/DEPLETE  PROP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS.  FLOW  RATE  INSUFFICIENT  TO 
SUPPORT  BURN  MAKES  PROP  IN  AFFECTED  TANK  UNUSABLE. 


REFERENCES:  1)  73A000014,  #257-1,-2,  258-1,-2  2)  VS70-431099 

3)  MC284-0430  4)  JSC  18958  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AB,BB  7)  JSC  12770  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-105 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/2R 
3/2R 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

204 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


VALVE-PROPELLANT  TANK  ISOLATION 
DELAYED  OPERATION 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/2R 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/2R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC284-0430-0023, -0024 


CAUSES:  IMPROPER  INPUT,  CONTAMINATION- 

FAILURE,  MANUFACTURING  DEFECT 


PIECE-PART  STRUCTURAL 


EFFECTS/RATIONALE : 

NORMALLY  IN  OPEN  POSITION.  FIRST  FAILURE  IS  NO 
VALVE  SWITCH  IN  GPC  POSITION  (TO  OPEN  VALVE  AT 
REDUNDANCY  IS  POSSIBLE  LOSS  OF 

MISSION  DUE  TO  POSSIBLE  LOSS  OF  ONE  ENGINE.  INITIAL  LOW  PROP 

POSSIBLE  DAMAGE  TO  AMD  TOSS  o“VgINE. 

OTHER  ENGINE  WHEN  VALVE 

REACHES  OPEN  POSITION.  VALVES  OPEN  FOR  ABORT  DUMPS. 


REFERENCES:  1)  73A000014,  #257-1,-2,  258-1,-2 

3)  MC284-0430  4)  JSC  18958  5)  JSC  11174,11.3 

943099, 43AB,BB  7)  JSC  12770  8)  TM-ES86009-43 


2)  VS70-431099 
6)  VS70- 


REPORT  DATE  02/05/87 


C-106 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/16/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  2/lR 

MDAC  ID:  205  ABORT:  2/lR 

ITEM:  VALVE-PROPELLANT  TANK  ISOLATION 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  RELIEF  VALVE  FAILS  TO 

RELIEVE 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

3/3 

LIFTOFF: 

2/lR 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING: 

2/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC284-0430-0023 , -0024 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MANUFACTURING  DEFECT 

EFFECTS/RATIONALE : 

WITH  FAILURE  OF  RELIEF  DEVICE  IN  ONE  VALVE,  ONE  FAILURE  (RELIEF 
DEVICE  IN  PARALLEL  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  POSSIBLE  RUPTURE  OF  DOWNSTREAM  LINES  AND  LOSS  AND  LEAKAGE 
OF  PROP  INTO  POD  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW.  VALVES  OPEN  FOR  ABORTS. 


REFERENCES:  1)  73A000014,  #257-1,-2,  258-1,-2  2)  VS70-431099 

3)  MC284-0430  4)  JSC  18958  5)  JSC  11174,11.3  6)  VS70- 

943099, 43AB,BB  7)  JSC  12770  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-107 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

206 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

2/lR 


ITEM:  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 

NTO 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  MMH  AND  NTO  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

2/lR 

ATO: 

LANDING/SAFING : 

3/3 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 

LOCATION: 

PART  NUMBER:  MC621-0059 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE : 

TANK  ISOL  VALVE  LEGS.  WITH  RESTRICTED  FLOW  IN  ONE  LEG,  ONE 
FAILURE  (REDUNDANT  LEG  RESTRICTION)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DURING  ENTRY  DUE  TO  INABILITY  TO  USE/DEPLETE  PROP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-108 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

207 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING  - PROPELLANT  LOW- POINT  DRAIN 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  LOW-POINT  DRAIN  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS; 

2/lR 

LIFTOFF: 

2/lR 

TAL; 

2/lR 

ONORBIT: 

2/lR 

AOA: 

2/lR 

DEORBIT: 
LANDING/ SAFING: 

2/lR 

2/lR 

ATO: 

2/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3401, -3451 

CAUSES;  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 
FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 

EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES;  1)  MC621-0059  2)  MC276-0018  3)  JSC  11174,11.3  4) 

VS70-943099,AC,BC 


REPORT  DATE  02/05/87 


C-109 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  12/16/86 

SUBSYSTEM;  OMS 
MDAC  ID;  208 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  /NA 


ITEM;  COUPLING  - PROPELLANT  LOW-POINT  DRAIN 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  LOW-POINT  DRAIN  COUPLING 

5) 

6) 

7) 

8) 


8) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING : 

REDUNDANCY  SCREENS; 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

/NA 

/NA 

TAL: 

/NA 

/NA 

AOA: 

/NA 

/NA 

3/3 

ATO; 

/NA 

A [ ] 

B [ 3 

c [ 3 

LOCATION; 

PART  NUMBER;  MC276-0018-3401,-3451 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR 

MISHANDLING  ' 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  MC621-0059  2)  MC276-0018  3)  JSC  11174  11  3 4^ 

VS70-943099,AC,BC  4; 


REPORT  DATE  02/05/87 


C-110 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

209 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING  - PROPELLANT  LOW-POINT  DRAIN 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  LOW-POINT  DRAIN  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO; 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B C ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3401, -3451 

CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  MC621-0059  2)  MC276-0018  3)  JSC  11174,11.3  4) 

VS70-943099,AC,BC 


REPORT  DATE  02/05/87 


C-111 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

210 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING-OMS/RCS  PROPELLANT  FILL  PORT 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OMS/RCS  PROPELLANT  FILL  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

2/lR 

RTLS: 

2/lR 

2/lR 

TAL: 

2/lR 

2/lR 

AOA: 

2/lR 

2/lR 

2/lR 

ATO: 

2/lR 

A C 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-2601,-2651 


CAUSES: 

FAILURE, 

PRESSURE 


SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 
MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 


EFFECTS/RATIONALE : 

POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES: 

VS70-943099, 


1)  VS70-431099  2)  MC276-0018  3)  JSC  11174,11.3 

43AC,BC  5)  MC621-0059  6)  73A000014,  #119,120 


4) 


REPORT  DATE  02/05/87 


C-112 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

211 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-OMS/RCS  PROPELLANT  FILL  PORT 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OMS/RCS  PROPELLANT  FILL  PORT  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c t ] 

LOCATION: 

PART  NUMBER:  MC276-0018-2601,-2651 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  VS70-431099  2)  MC276-0018  3)  JSC  11174,11.3  4) 

VS70-943099,  43AC,BC  5)  73A000014,  #119,120  6)  MC621-0059 


REPORT  DATE  02/05/87 


C-113 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

212 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-OMS/RCS  PROPELLANT  FILL  PORT 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
ASSEMBLIES 

PROP  STOR  & DIST  SUBSYSTEM 
OMS/RCS  PROPELLANT  FILL  PORT  COUPLING 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 
LANDING/ SAFING: 

/NA 

3/3 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [ ] 

B C ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-2601, -2651 


CAUSES:  FILTER  BLOCKAGE,  PIECE-PART 

PROCEDURAL  ERROR,  CONTAMINATION 


STRUCTURAL  FAILURE, 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  VS70-431099  2)  MC276-0018  3)  JSC  11174,11.3  4) 

VS70-943099,  43AC,BC  5)  73A000014,  #119,120  6)  MC621-0059 


REPORT  DATE  02/05/87 


C-114 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

213 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING  - PROPELLANT  GROUND-PURGE 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GROUND-PURGE  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

2/lR 

RTLS: 

2/lR 

LIFTOFF: 

2/lR 

TAL; 

2/lR 

ONORBIT; 

2/lR 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 3 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3803,-3853 

CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 


EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP, 
FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014,  #235,  236  2)  VS70-431099  3)  MC621- 

0059  4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70-943099,AC,BC 


REPORT  DATE  02/05/87 


C-115 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

214 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING  - PROPELLANT  GROUND-PURGE 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GROUND-PURGE  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL; 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT; 

LANDING/SAFING: 

/NA 

3/3 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3803,-3853 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #235,  236  2)  VS70-431099  3)  MC621- 

0059  4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70-943099,  AC,  BC 


REPORT  DATE  02/05/87 


C-116 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/16/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/3 

MDAC  ID: 

215 

ABORT: 

/NA 

ITEM: 

COUPLING 

- PROPELLANT  GROUND-PURGE 

FAILURE  MODE:  FAILS  TO 

CLOSE,  FAILS  TO  OPEN,  RESTRICTED 

FLOW 

LEAD  ANALYST:  C.D.  PRUST 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  PROPELLANT  GROUND-PURGE  COUPLING 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3803,-3853 

CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #235,  236  2)  VS70-431099  3)  MC621- 

0059  4)  MC276-0018  5)  JSC  11174,11.3  6)  VS70-943099,AC,  BC 


c -3 


REPORT  DATE  02/05/87 


C-117 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

12/16/86 

OMS 

216 

HIGHEST 

CRITICALITY 

FLIGHT: 

ABORT: 

HDW/FUNC 

1/1 

1/1 

ITEM: 

CROSSFEED 

GIMBAL  JOINT 

FAILURE  MODE:  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  CROSSFEED  GIMBAL  JOINT 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  1/1  RTLS: 

LIFTOFF:  1/1  TAL*  * 

ONORBIT:  1/1  AOA* 

DEORBIT:  1/1  ATO: 

LANDING/SAFING:  1/1 


REDUNDANCY  SCREENS:  A [ ] 

LOCATION: 

PART  NUMBER:  ME271-0092-0004,-0005 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [ ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT,  WELD 
FAILURE,  MANUFACTURING  DEFECT,  MISHANDLING,  MECHANICAL  SHOCK. 
HIGH  PRESStJRE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS  AND 
LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW.  LOCATED  ON  CROSSFEED  LINE  IN  AFT  BODY. 


REFERENCES:  1)  VS70-431099,  #345-348  2)  ME271-0092 


REPORT  DATE  02/05/87 


C-118 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/16/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  1/1 

MDAC  ID:  217  ABORT:  1/1 

ITEM:  CROSSFEED  GIMBAL  JOINT 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  PHYSICAL  BINDING/JAMMING, 

NO  BELLOWS  ANGULAR  DEFLECTION 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  CROSSFEED  GIMBAL  JOINT 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FXJNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/ SAFING: 

1/1 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  ME271-0092-0004,-0005 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MANUFACTURING  DEFECT, 

MECHANICAL  SHOCK,  MISHANDLING,  CONTAMINATION 

EFFECTS/RATIONALE : 

FAILURE  OF  BELLOWS  TO  PROVIDE  ANGULAR  COMPENSATION  FOR  PROP  LINE 
MOVEMENTS  COULD  RESULT  IN  LINE  RUPTURE,  LOSS  AND  LEAKAGE  OF  PROP, 
FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW.  LOCATED  ON 
CROSSFEED  LINE  IN  AFT  BODY. 


REFERENCES:  1)  VS70-431099,  #345-348  2)  ME271-0092 


REPORT  DATE  02/05/87 


C-119 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  12/16/86 

SUBSYSTEM:  OMS 

MDAC  ID:  218 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  CROSSFEED  GIMBAL  JOINT 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  CROSSFEED  GIMBAL  JOINT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

3/3 

RTLS; 

LIFTOFF; 

2/2 

TAL: 

ONORBIT: 

2/2 

AOA: 

DEORBIT; 

1/1 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

3/3 

2/2 


REDUNDANCY  SCREENS:  A [ ] 

LOCATION: 

PART  NUMBER:  ME271-0092-0004, -0005 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE.  RESTRICTED  FLOW 
IN  CROSSFEED  PATH  DURING  A CROSSFEED  OMS  BURN  COULD  REULT  IN 
DAMAGE  TO  AND  LOSS  OF  AFFECTED  ENGINE  DUE  TO  IMPROPER  MIXTURE 
RATIO.  PROP  IN  POD  WITH  AFFECTED  ENGINE  SUBSEQUENTLY  STRANDED 
DUE  TO  LOSS  OF  CROSSFEED  PATH  RESULTING  IN  POSSIBLE  VIOLATIONS 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS 
DURING  ENTRY.  FAILURE  NOT  DETECTABLE  UNTIL  EFFECTS  MANIFESTED 
LOCATED  ON  XFEED  LINE  IN  AFT  BODY. 


REFERENCES:  1)  VS70-431099,  #345-348  2)  ME271-0092  3)  FLIGHT 

TDTTT  TT  ^ * 


REPORT  DATE  02/05/87 


C-120 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

219 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  FLEXIBLE  LINE  ASSEMBLY 

FAILURE  MODE:  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FLEXIBLE  LINE  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 

1/1 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [ ] B [ 


C [ ] 


LOCATION: 

PART  NUMBER:  MC271-0082-0001, -0002, -0003, -0004 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT,  . 
MANUFACTURING  DEFECT,  MISHANDLING,  MECHANICAL  SHOCK,  HIGH 
PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND 
LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW.  LOCATED  ON  CROSSFEED  LINE  IN  AFT  BODY. 


REFERENCES:  1)  73A000014,  #345-348  2)  VS70-943099 , 43AJ  3) 

V070-435011 


REPORT  DATE  02/05/87 


C-121 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/16/86 

OMS 

220 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  1/1 

ABORT:  1/1 


ITEM;  FLEXIBLE  LINE  ASSEMBLY 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FLEXIBLE  LINE  ASSEMBLY 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS; 

LIFTOFF; 

2/2 

TAL; 

ONORBIT; 

2/2 

AOA: 

DEORBIT; 

1/1 

ATO; 

LANDING/SAFING ; 

3/3 

HDW/FUNC 

1/1 

1/1 

3/3 

2/2 


REDUNDANCY  SCREENS;  A [ ] B [ ] 

LOCATION; 

PART  NUMBER;  MC271-0082-0001, -0002, -0003, -0004 


CAUSES;  CONTAMINATION 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE.  RESTRICTED  FLOW 
IN  CROSSFEED  PATH  DURING  A CROSSFEED  OMS  BURN  COULD  REULT  IN 
DAMAGE  TO  AND  LOSS  OF  AFFECTED  ENGINE  DUE  TO  IMPROPER  MIXTURE 
RATIO.  PROP  IN  POD  WITH  AFFECTED  ENGINE  SUBSEQUENTLY  STRANDED 
DUE  TO  LOSS  OF  CROSSFEED  PATH  RESULTING  IN  POSSIBLE  VIOLATIONS 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS 
DURING  ENTRY.  FAILURE  NOT  DETECTABLE  UNTIL  EFFECTS  MANIFESTED. 

REFERENCES;  1)  73A000014,  #345-348  2)  VS70-943099,43AJ  3) 

V070-435011  4)  FLIGHT  RULE  6-95, C 


REPORT  DATE  02/05/87 


C-122 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

221 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/lR 


ITEM:  CROSSFEED  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
ASSEMBLIES 

PROP  STOR  & DIST  SUBSYSTEM 

CROSSFEED  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0059 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE : 

XFEED  VALVE  LEGS;  INTERCONNECT  VALVE  LEGS.  FIRST  FAILURE  IS  NO 
EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE 
TO  LOSS  OF  INTERCONNECT/CROSSFEED  CAPABILITY  AND  LOSS  OF  ENGINE 
REDUNDANCY.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE 
(RESTRICTION  IN  REDUNDANT  LEG)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  INTERCONNECT  CAPABILITY  AND  POSSIBLE 
INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007  6)  FLIGHT  RULES  6-9, B,  6-95, B 


REPORT  DATE  02/05/87 


C-123 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


12/30/86 

OMS 

222 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  CROSSFEED  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS 

FAILURE  MODE;  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  CROSSFEED  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 

HDW/FUNC 

3/3 

2/2 

2/2 

1/1 

3/3 

ABORT 

RTLS; 

TAL; 

AOA; 

ATO; 

HDW/FUNC 

1/1 

1/1 

3/3 

2/2 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER:  MC62 1-0059 


CAUSES;  CONTAMINATION 


EFFECTS/RATIONALE : 

XFEED  LINES.  FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE. 
RESTRICTED  FLOW  IN  CROSSFEED  PATH  DURING  A CROSSFEED  OMS  BURN 
COULD  RESULT  IN  DAMAGE  TO  AND  LOSS  OF  ENGINE  DUE  TO  IMPROPER 
MIXTURE  RATIO.  PROP  IN  POD  WITH  AFFECTED  ENGINE  SUBSEQUENTLY 
STRANDED  DUE  TO  LOSS  OF  CROSSFEED  PATH  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS  DURING  ENTRY.  FAILURE  UNDETECTABLE  UNTIL  EFFECTS 
MANIFESTED. 


REFERENCES;  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007  6)  FLIGHT  RULES  6-9, B,  6-95, C 


REPORT  DATE  02/05/87 


C-124 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

223 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/lR 


ITEM:  VALVE-CROSSFEED 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

2/lR 

LIFTOFF: 

3/3 

TAL: 

2/lR 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/2R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC284-0430-0011, -0012 

CAUSES;  CONTAMINATION,  LOSS  OF  INPUT,  PIECE-PART  STRUCTURAL 
FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MISHANDLING 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT  (PRIORITY  FLIGHT  INVOKED).  LOSS  OF 
ALL  REDUNDANCY  IS  LOSS  OF  MISSION  DUE  TO  LOSS  OF  OMS 
INTERCONNECT/CROSSFEED  CAPABILITY  AND  LOSS  OF  ENGINE  REDUNDANCY.  ' 
WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE  (PARALLEL 
VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  INABILITY 
TO  DUMP  OMS  PROP  THROUGH  RCS  JETS  AND  POSSIBLE  INABILITY  TO 
COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014,  #259-1,-2,  260, -1,-2  2)  VS70-431099 

3)  MC284-0430  4)JSC  11174,11.3  5)  VS70-943099,AC,BC  6)  JSC 

12770  7)  JSC  18958  8)  TM-ES86009-43  9)  FLIGHT  RULES  6-9, B,  6- 

95,B,C 


REPORT  DATE  02/05/87 


C-125 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

224 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  VALVE-CROSSFEED 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 


C [ ] 


LOCATION: 

PART  NUMBER:  MC284-0430-0011,-0012 


CAUSES:  CONTAMINATION,  LOSS  OF  INPUT,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT  (POSSIBLE  LOSS  OF  RCS  CROSSFEED  CAPABILITY  DURING 
BURN  TO  AVOID  BURNING  RCS  PROP  THROUGH  OMS). 


OMS 


REFERENCES:  1)  73A000014,  #259-1,-2,  260, -1,-2  2)  VS70-431099 

3)  MC284-0430  4)  JSC  11174,11.3  5)  VS70-943099,AC,BC  6)  JSC 

12770  7)  JSC  18958  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-126 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

225 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/lR 


ITEM:  VALVE-CROSSFEED 

FAILURE  MODE:  FAILS  MIDTRAVEL,  PARTIALLY  OPEN/CLOSED 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/3 

TAL; 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/2R 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC284-0430-0011, -0012 


CAUSES:  CONTAMINATION,  LOSS  OF  INPUT,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MISHANDLING 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE 
LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/CROSSFEED  CAPABILITY 
AND  LOSS  OF  ENGINE  REDUNDANCY  (DUE  TO  LOSS  OF  ADEQUATE  FLOW 
PATH).  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE 
(FAILURE  TO  OPEN  OF  PARALLEL  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  JETS 
AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014,  #259-1,-2,  260, -1,-2  2)  VS70-431099 

3)  MC284-0430  4)JSC  11174,11.3  5)  VS70-943099,  AC,  BC  6)  JSC 

12770  7)  JSC  18958  8)  TM-ES86009-43  9)  FLIGHT  RULES  6-9, B,  6- 

95,B,C 


REPORT  DATE  02/05/87 


C-127 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

226 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  VALVE-CROSSFEED 

FAILURE  MODE:  INTERNAL  LEAKAGE,  FORWARD/REVERSE  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ 


C [ ] 


LOCATION; 

PART  NUMBER;  MC284-0430-0011,-0012 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  BALL  SEAL  FAILURES, 

RELIEF  VALVE  SEAL  FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT, 
CONTAMINATION 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LOSS  OF  RCS  CROSSFEED  CAPABILITY  DURING  OMS 
BURN  TO  AVOID  BURNING  RCS  PROP  THROUGH  OMS. 


REFERENCES:  1)  73A000014,  #259-1,-2,  260, -1,-2  2)  VS70-431099 

3)  MC284-0430  4)JSC  11174,11.3  5)  VS70-943099,AC,BC  6)  JSC 

12770  7)  JSC  18958  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-128 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/16/86 

OMS 

227 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  1/1 

ABORT;  1/1 


ITEM;  VALVE-CROSSFEED 

FAILURE  MODE;  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A & B VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

1/1 

RTLS; 

1/1 

LIFTOFF; 

1/1 

TAL; 

1/1 

ONORBIT; 

1/1 

AO  A; 

1/1 

DEORBIT; 

1/1 

ATO; 

1/1 

LANDING/ SAFING; 

1/1 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION; 

PART  NUMBER;  MC284-0430-0011,-0012 

CAUSES;  HOUSING  STRUCTURAL  FAILURE,  BELLOWS  AND  SEAL  FAILURES, 
MATERIAL  DEFECT,  WELD  FAILURE,  MANUFACTURING  DEFECT,  HIGH 
PRESSURE 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE.  STRUCTURAL 
FAILURE  OF  HOUSING  ALLOWS  LOSS  AND  LEAKAGE  OF  PROP  INTO  POD 
RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES;  1)  73A000014,  #259-1,-2,  260, -1,-2  2)  VS70-431099 

3)  MC284-0430  4)JSC  11174,11.3  5)  VS70-943099,AB,BB  6)  JSC 

12770  7)  JSC  12770  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-129 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

228 


ITEM:  VALVE-CROSSFEED 

FAILURE  MODE:  RESTRICTED  FLOW 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/lR 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A & B VLVS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/3 

TAL: 

2/lR 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/2R 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC284-0430-0011,-0012 


CAUSES:  .FILTER  BLOCKAGE,  CONTAMINATION 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE 
LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/CROSSFEED  CAPABILITY 
AND  LOSS  OF  ENGINE  REDUNDANCY.  PROP  FLOW  RATE  THROUGH  CROSSFEED 
VALVES  INSUFFICIENT  TO  SUPPORT  OPS.  WITH  FIRST  FAILURE  DURING 
RTLS  OR  TAL,  ONE  FAILURE  (PARALLEL  VALVE)  AWAY  FROM  POSSIBLE  LOSS 
OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO  INABILITY  TO  DUMP  OMS  PROP 
THROUGH  RCS  JETS  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL 
OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL 
AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014,  #259-1,-2,  260, -1,-2  2)  VS70-431099 

3)  MC284-0430  4)JSC  11174,11.3  5)  VS70-943099,AB,BB  6)  JSC 

12770  7)  JSC  12770  8)  TM-ES86009-43  9)  FLIGHT  RULE  6-9, B,  6- 

95,B,C 


REPORT  DATE  02/05/87 


C-130 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

229 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/lR 


ITEM:  VALVE-CROSSFEED 

FAILURE  MODE:  DELAYED  OPERATION 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A & B VLVS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/3 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P 3 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC284-0430-0011, -0012 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MANUFACTURING  DEFECT 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  WITH  VALVE  SWITCH  IN  GPC  POSITION 
(TO  OPEN  VALVE  AT  START  OF  BURN),  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  MISSION  DUE  TO  POSSIBLE  LOSS  OF  ENGINE  DURING 
CROSSFEED  OPS.  INITIAL  PROP  FLOW  RATE  INSUFFICIENT  TO  SUPPORT 
BURN  COULD  LEAD  TO  DAMAGE  TO  AND  LOSS  OF  ENGINE.  WITH  FIRST 
FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE  (FAILURE  TO  OPEN  OF 
PARALLEL  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  JETS  AND  POSSIBLE 
INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  73A000014,  #259-1,-2,  260, -1,-2  2)  VS70-431099 

3)  MC284-0430  4)  JSC  11174,11.3  5)  VS70-943099,AB,BB  6)  JSC 

12770  7)  JSC  12770  8)  TM-ES86009-43  9)  FLIGHT  RULE  6-9, B,  6- 

95,B,C 


REPORT  DATE  02/05/87 


C-131 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/16/86 

OMS 

230 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/lR 

3/lR 


ITEM;  VALVE-CROSSFEED 

FAILURE  MODE;  FAILS  OUT  OF  TOLERANCE,  RELIEF  VALVE  FAILS  TO 
RELIEVE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A i B VLVS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF; 

3/lR 

TAL; 

3/lR 

ONORBIT; 

3/lR 

AOA: 

3/lR 

DEORBIT; 
LANDING/SAFING : 

3/lR 

3/lR 

ATO: 

3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B C F ] 

C [ P ] 

LOCATION: 

PART  NUMBER;  MC284-0430-0011,-0012 


CAUSES;  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 
MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE 
RUPTURE  OF  CROSSFEED  LINES  RESULTING  IN  LOSS  OF  LEAKAGE  OF 
PROP  INTO  ORBITER,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND 
CREW. 


REFERENCES;  1)  73A000014,  #259-1,-2,  260, -1,-2  2)  VS70-431099 

3)  MC284-0430  4)JSC  11174,11.3  5)  VS70-943099,AB,BB  6)  JSC 

12770  7)  JSC  12770  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-132 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/16/86 

OMS 

231 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING  - HIGH-POINT  BLEED 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  HIGH-POINT  BLEED  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

2/lR 

RTLS: 

2/lR 

LIFTOFF; 

2/lR 

TAL: 

2/lR 

ONORBIT; 

2/lR 

AOA: 

2/lR 

DEORBIT: 
LANDING/ SAFING: 

2/lR 

2/lR 

ATO: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-2402,-2452 


CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 

EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES;  1)  73A000014,  #327,  328  2)  VS70-431099  3)  MC276- 

0018  4)  VS70-943099,43AJ  5)  JSC  11174,11.4 


REPORT  DATE  02/05/87 


C-133 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

232 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING  - HIGH-POINT  BLEED 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  HIGH-POINT  BLEED  COUPLING 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT; 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO; 

/NA 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-2402,-2452 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #327,  328  2)  VS70-431099  3)  MC276- 

0018  4)  VS70-943099,43AJ  5)  JSC  11174,11.4 


REPORT  DATE  02/05/87 


C-134 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

233 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  /NA 


ITEM:  COUPLING  - HIGH-POINT  BLEED 

FAILURE  MODE;  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  HIGH-POINT  BLEED  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF; 

/NA 

TAL: 

/NA 

ONORBIT; 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-2402, -2452 

CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  73A000014,  #327,  328  2)  VS70-431099  3)  MC276- 

0018  4)  VS70-943099,43AJ  5)  JSC  11174,11.4 


REPORT  DATE  02/05/87 


C-135 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

234 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING-CROSSFEED  DRAIN 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  CROSSFEED  DRAIN  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

2/lR 

RTLS: 

2/lR 

LIFTOFF: 

2/lR 

TAL: 

2/lR 

ONORBIT; 

2/lR 

AOA: 

2/lR 

DEORBIT: 

LANDING/SAFING: 

2/lR 

2/lR 

ATO: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-2401,-2451 


CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 


EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014,  #381-384  2)  VS70-431099  3)  MC276- 

0018  4)  VS70-943099,43AJ  5)  JSC  11174,11.4 


REPORT  DATE  02/05/87 


C-136 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

235 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-CROSSFEED  DRAIN 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  CROSSFEED  DRAIN  COUPLING 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

3/3 

ATO: 

/NA 

REDUNDANCY  SCREENS; 

A [ ] 

w 
1 — 1 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-2401, -2451 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #381-384  2)  VS70-431099  3)  MC276- 

0018  4)  VS70-943099,43AJ  5)  JSC  11174,11.4 


REPORT  DATE  02/05/87 


C-137 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
/NA 


FLOW 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  CROSSFEED  DRAIN  COUPLING 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

236 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  COUPLING-CROSSFEED  DRAIN 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

LANDING/SAFING: 

/NA 

3/3 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION : 

PART  NUMBER:  MC276-0018-2401,-2451 


CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #381-384  2)  VS70-431099  3)  MC276- 

0018  4)  VS70-943099,43AJ  5)  JSC  11174,11.4 


REPORT  DATE  02/05/87 


C-138 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

237 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS-MMH  AND 

NTO 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  MMH  AND  NTO  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION; 

PART  NUMBER:  MC62 1-0059 

CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE ; 

ALL  COUPLING  LINES.  NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-139 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

238 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

1/1 


ITEM:  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 

NTO 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  MMH  AND  NTO  PROPELLANT  LINES 

5) 

6) 

7) 

8) 

9) 


AND  MECHANICAL  FITTINGS 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

2/2 

AOA: 

DEORBIT: 

2/lR 

ATO: 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 

LOCATION: 

PART  NUMBER:  MC62 1-0059 


HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


C [ P ] 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE : 

XFEED  CONN  TO  ENG  CONN;  ENG  LINES.  FIRST  FAILURE  RESULTS  IN  LOSS 
OF  ENGINE.  WITH  FIRST  FAILURE,  ONE  FAILURE  (RESTRICTION  IN  OTHER 
POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH 
ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  RESULTS  IN  INABILITY 
TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-140 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

239 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  GIMBAL  BELLOWS 

FAILURE  MODE:  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS; 

1/1 

LIFTOFF; 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO; 

1/1 

LANDING/SAFING: 

1/1 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER:  73P550015 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT,  WELD 

FAILURE,  MANUFACTURING  DEFECT,  MISHANDLING,  MECHANICAL  SHOCK, 
HIGH  PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND 
LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW.  LOCATED  BETWEEN  CROSSFEED  LINE  CONNECTION  AND 
ENGINE  INTERFACE  CONNECTION. 


REFERENCES:  1)  73A000014,  #266  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  73P550015 


REPORT  DATE  02/05/87 


C-141 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/16/86 

SUBSYSTEM:  OMS 

MDAC  ID:  240 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  GIMBAL  BELLOWS 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  PHYSICAL  BINDING/ JAMMING 

NO  BELLOWS  ANGULAR  DEFLECTION  ^ 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  1/1  RTLS: 

LIFTOFF:  1/1  TAH  ‘ 

ONORBIT:  1/1  AOA* 

DEORBIT:  1/1  ATO* 

LANDING/ SAFING:  1/1 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [ ] 

LOCATION: 

PART  NUMBER:  73P550015 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MANUFACTURING  DEFECT 

MECHANICAL  SHOCK,  MISHANDLING,  CONTAMINATON  ' 

EFFECTS/RATIONALE : 

FAILURE  OF  A BELLOWS  TO  PROVIDE  ANGULAR  COMPENSATION  FOR  PROP 
LINE  MOVEMENTS  COULD  RESULT  IN  LINE  RUPTURE,  LOSS  AND  LEAKAGE  OF 
PROP,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW.  LOCATED 
BETWEEN  CROSSFEED  LINE  CONNECTION  AND  ENGINE  INTERFACE 
CONNECTION . 


REFERENCES:  1)  73A000014,  #266  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  73P550015 


REPORT  DATE  02/05/87 


C-142 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

12/16/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT: 

2/lR 

MDAC  ID: 

241 

ABORT: 

1/1 

ITEM: 

GIMBAL  BELLOWS 

FAILURE  MODE:  RESTRICTED  FLOW 

LEAD  ANALYST:  C.D.  PRUST 

SUBSYS  LEAD: 

D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF; 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/S AFING; 

3/3 

REDUNDANCY  SCREENS:  A[2]  B[F]  C[P] 

LOCATION; 

PART  NUMBER:  73P550015 

CAUSES : CONTAMINATION 

EFFECTS/RATIONALE : 

FLOW  RESTRICTION  IN  BELLOWS  AT  THIS  LOCATION  RESULTS  IN  POSSIBLE 
LOSS  OF  MISSION  DUE  TO  LOSS  OF  ONE  ENGINE.  PROP  IN  AFFECTED  POD 
STILL  USABLE.  WITH  FIRST  FAILURE,  ONE  FAILURE  (RESTRICTION  IN 
BELLOWS  IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE 
TO  LOSS  OF  BOTH  ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE 
INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS.  LOCATED  BETWEEN  CROSS FEED  LINE 
CONNECTION  AND  ENGINE  INTERFACE  CONNECTION. 

REFERENCES:  1)  73A000014,  #266  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  73P530015 


REPORT  DATE  02/05/87 


C-143 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/16/86 

SUBSYSTEM:  OMS 

MDAC  ID:  242 

ITEM:  GIMBAL  BELLOWS 

FAILURE  MODE:  STRUCTURAL  FAILURE, 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 


9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  1/1  RTLS: 

LIFTOFF:  1/1  TAL: 

ONORBIT:  1/1  aoA* 

DEORBIT:  1/1  ATO: 

LANDING/S AFING:  1/1 

REDUNDANCY  SCREENS:  A [ ] B [ ] 

LOCATION: 

PART  NUMBER:  73P550015 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT,  WELD 

FAILURE,  MANUFACTURING  DEFECT,  MISHANDLING,  MECHANICAL  SHOCK. 
HIGH  PRESSURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND 
LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW.  LOCATED  BETWEEN  CROSSFEED  LINE  CONNECTION  AND 
ENGINE  INTERFACE  CONNECTION. 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [ ] 


REFERENCES:  1)  73A000014,  #265  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  73P550015 


REPORT  DATE  02/05/87 


C-144 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/16/86 

OMS 

243 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

1/1 

1/1 


ITEM;  GIMBAL  BELLOWS 

FAILURE  MODE;  FAILS  OUT  OF  TOLERANCE,  PHYSICAL  BINDING/ JAMMING, 
NO  BELLOWS  ANGULAR  DEFLECTION 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 
4}  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

1/1 

RTLS; 

1/1 

LIFTOFF; 

1/1 

TAL; 

1/1 

ONORBIT; 

1/1 

AOA; 

1/1 

DEORBIT; 

1/1 

ATO; 

1/1 

LANDING/SAFING; 

1/1 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION; 

PART  NUMBER;  73P550015 

CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  MAITOFACTURING  DEFECT, 
MECHANICAL  SHOCK,  MISHANDLING,  CONTAMINATION 

EFFECTS/RATIONALE ; 

FAILURE  OF  A BELLOWS  TO  PROVIDE  ANGULAR  DEFLECTION  FOR  PROP  LINE 
MOVEMENTS  COULD  RESULT  IN  LINE  RUPTURE,  LOSS  AND  LEAKAGE  OF  PROP, 
FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW.  LOCATED 
BETWEEN  CROSSFEED  LINE  CONNECTION  AND  ENGINE  INTERFACE 
CONNECTION. 


REFERENCES;  1)  73A000014,  #265  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  73P550015 


REPORT  DATE  02/05/87 


C-145 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

244 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  GIMBAL  BELLOWS 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  GIMBAL  BELLOWS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT; 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER;  73P550015 


CAUSES;  CONTAMINATION 
EFFECTS/RATIONALE : 

LOCATED  BETWEEN  CROSS FEED  LINE  CONNECTION  AND  ENGINE  INTERFACE 
CONNECTION.  FLOW  RESTRICTION  IN  BELLOWS  AT  THIS  LOCATION  RESULTS 
IN  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF  ENGINE.  PROP  IN 
AFFECTED  POD  STILL  USABLE.  WITH  FIRST  FAILURE,  ONE  FAILURE 
(RESTRICTION  IN  BELLOWS  IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST  FAILURE  DURING 
RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  1)  73A000014,  #265  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  73P550015 


REPORT  DATE  02/05/87 


C-146 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

245 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM;  ALIGNMENT  BELLOWS 

FAILURE  MODE;  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  ALIGNMENT  BELLOWS 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS; 

1/1 

LIFTOFF: 

1/1 

TAL; 

1/1 

ONORBIT; 

1/1 

AOA: 

1/1 

DEORBIT; 

1/1 

ATO; 

1/1 

LANDING/SAFING; 

1/1 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  73P550003 


CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT,  WELD 
FAILURE,  MANUFACTURING  DEFECT,  MISHANDLING,  MECHANICAL  SHOCK, 
HIGH  PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND 
LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW.  LOCATED  ON  FUEL  LINE  BETWEEN  CROSSFEED  LINE 
CONNECTION  AND  ENGINE  INTERFACE  CONNECTION. 


REFERENCES;  1)  73A000014,  #263  2)  VS70-431099  3)  VS70- 

943099, 43AC,BC  4)  73P550003 


REPORT  DATE  02/05/87 


C-147 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

246 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  ALIGNMENT  BELLOWS 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  PHYSICAL  BINDING/JAMMING, 

NO  BELLOWS  ANGULAR  DEFLECTION 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  ALIGNMENT  BELLOWS 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


REDUNDANCY  SCREENS;  A [ ] 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

1/1 

RTLS: 

1/1 

1/1 

TAL: 

1/1 

1/1 

AOA: 

1/1 

1/1 

ATO: 

1/1 

1/1 

B [ ] 


C [ ] 


LOCATION: 
PART  NUMBER: 


73P550003 


CAUSES:’  PIECE-PART  STRUCTURAL  FAILURE,  MANUFACTURING  DEFECT, 
MECHANICAL  SHOCK,  MISHANDLING,  CONTAMINATION 

EFFECTS/RATIONALE : 

FAILURE  OF  BELLOWS  TO  PROVIDE  ANGULAR  OR  AXIAL  COMPENSATION  FOR 
PROP  LINE  MOVEMENTS  COULD  RESULT  IN  RUPTURE  OF  LINE,  LOSS  AND 
LEAKAGE  OF  PROP,  FIRE/ EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND 
CREW.  LOCATED  ON  FUEL  LINE  BETWEEN  CROSSFEED  LINE  CONNECTION  AND 
ENGINE  INTERFACE  CONNECTION. 


REFERENCES:  1)  73A000014,  #263  2)  VS70-431099  3)  VS70- 

943099, 43AC,BC  4)  73P550003 


REPORT  DATE  02/05/87  C-148 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

247 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 


ALIGNMENT  BELLOWS 
RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  ALIGNMENT  BELLOWS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  73P550003 

CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE : 

LOCATED  ON  FUEL  LINE  BETWEEN  XFEED  LINE  CONNECTION  AND  ENGINE 
INTERFACE  CONNECTION.  FLOW  RESTRICTION  IN  BELLOWS  AT  THIS 
LOCATION  RESULTS  IN  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
ENGINE.  PROP  IN  AFFECTED  POD  STILL  USABLE.  WITH  FIRST  FAILURE, 
ONE  FAILURE  (RESTRICTION  IN  BELLOWS  IN  OTHER  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST 
FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME- 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014,  #263  2)  VS70-431099  3)  VS70- 

943099, 43AC,BC  4)  73P550003 


REPORT  DATE  02/05/87 


C-149 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/17/86 

OMS 

248 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT;  1/1 


ITEM;  ENGINE  INLET  FILTER  AND  ORIFICE 

FAILURE  MODE;  STRUCTURAL  FAILURE,  CONTAMINATION  PASSAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  ENGINE  INLET  FILTER  AND  ORIFICE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL; 

ONORBIT: 

2/2 

AOA: 

DEORBIT; 

2/lR 

ATO: 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 

LOCATION; 

PART  NUMBER;  MC62 1-0009 


HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


C [ P ] 


CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT, 
MANUFACTURING  DEFECT 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  INTRODUCES  CONTAMINATION  IN  ENGINE  LINES  WHERE 
DAMAGE  TO  BI-PROP  VALVES  COULD  RESULT  IN  LOSS  OF  AFFECTED  ENGINE. 
WITH  FIRST  FAILURE,  ONE  FAILURE  (INLET  FILTER  IN  OTHER  POD)  AWAY 
FROM  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES. 
FIRST  FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME- 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES;  1)  JSC  11174,11.3  2)  VS70-943099,43AD,BD  3)  VS70- 

431099, SH3 


REPORT  DATE  02/05/87 


C-150 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

249 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  ENGINE  INLET  FILTER  AND  ORIFICE 

FAILURE  MODE:  RESTRICTED  FLOW,  CLOGGED 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  ENGINE  INLET  FILTER  AND  ORIFICE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 

CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

WITH  FIRST  FAILURE  AND  RESULTING  LOSS  OF  AFFECTED  ENGINE,  ONE 
FAILURE  (INLET  FILTER  IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/ VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST  FAILURE  DURING 
RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
ENGINE  AND  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING 
IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  JSC  11174,11.3  2)  VS70-943099,43AD,BD  3)  VS70- 

431099, SH3 


REPORT  DATE  02/05/87 


C-151 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

250 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  BELLOWS -T VC  GIMBAL 

FAILURE  MODE;  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  TVC  GIMBAL  BELLOWS 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRE LAUNCH: 

1/1 

RTLS 

LIFTOFF; 

1/1 

TAL; 

ONORBIT: 

1/1 

AOA: 

DEORBIT; 

1/1 

ATO: 

LANDING/SAFING: 

1/1 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS;  A [ ] B [ 


C [ ] 


LOCATION; 

PART  NUMBER;  MC621-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT,  WELD 
FAILURE,  MANUFACTURING  DEFECT,  MISHANDLING,  MECHANICAL  SHOCK, 
HIGH  PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND 
LEAKAGE  OF  PROP  AND  RESULTING  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW.  LOCATED  BETWEEN  ENGINE  INTERFACE  CONNECTION  AND  BI- 
PROP VALVES. 


REFERENCES;  1)  MC62 1-0009 


REPORT  DATE  02/05/87 


C-152 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

251 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  BELLOWS-TVC  GIMBAL 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  PHYSICAL  BINDING/JAMMING, 

NO  BELLOWS  ANGULAR  DEFLECTION 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  TVC  GIMBAL  BELLOWS 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 

1/1 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO; 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [ ] B 


C [ ] 


LOCATION: 

PART  NUMBER;  MC62 1-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MANUFACTURING  DEFECT, 

MECHANICAL  SHOCK,  MISHANDLING,  CONTAMINATION 


EFFECTS/RATIONALE : 

FAILURE  OF  BELLOWS  TO  PROVIDE  ANGULAR  COMPENSATION  FOR  ENGINE  AND 
PROP  LINE  MOVEMENTS  COULD  RESULT  IN  RUPTURE  OF  LINE,  LOSS  AND 
LEAKAGE  OF  PROP,  FIRE/ EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND 
CREW.  LOCATED  BETWEEN  ENGINE  INTERFACE  CONNECTION  AND  BIPROP 
VALVES . 


REFERENCES:  1)  MC621-0009 


REPORT  DATE  02/05/87 


C-153 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/16/86 

OMS 

252 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  BELLOWS -TVC  GIMBAL 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  TVC  GIMBAL  BELLOWS 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL; 

ONORBIT: 

2/2 

AOA: 

DEORBIT; 

2/lR 

ATO; 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 

LOCATION; 

PART  NUMBER;  MC621-0009 


HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


C [ P ] 


CAUSES;  CONTAMINATION 


EFFECTS/RATIONALE : 

RESTRICTION  AT  THIS  LOCATION  RESULTS  IN  POSSIBLE  LOSS  OF  MISSION 
DUE  TO  LOSS  OF  ONE  ENGINE.  PROP  IN  AFFECTED  POD  STILL  USABLE. 
NEXT  FAILURE  (RESTRICTION  IN  BELLOWS  IN  OTHER  POD)  IS  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST  FAILURE 
DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS.  LOCATED  BETWEEN  ENGINE 
INTFC  CONN  AND  BIPROP  VLVS. 


REFERENCES;  1)  MC621-0009 


REPORT  DATE  02/05/87 


C-154 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

253 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING  - HIGH-POINT  BLEED  TEST  PORT 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  HIGH-POINT  BLEED  TEST  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

2/lR 

LIFTOFF: 

2/lR 

TAL: 

2/lR 

ONORBIT; 

2/lR 

AOA: 

2/lR 

DEORBIT; 
LANDING/ SAFING; 

2/lR 

2/lR 

ATO: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER;  MC276-0018-3403,-3453 


CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 


EFFECTS/RATIONALE ; 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014,  #221,  222  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0018,  5)  MC621-0059  6)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-155 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

254 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  /NA 


ITEM:  COUPLING  - HIGH-POINT  BLEED  TEST  PORT 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J,  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  HIGH-POINT  BLEED  TEST  PORT  COUPLING 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

/NA 

LIFTOFF; 

/NA 

TAL: 

/NA 

ONORBIT; 

/NA 

AOA: 

/NA 

DEORBIT; 

LANDING/SAFING; 

/NA 

3/3 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER:  MC276-0018-3403,-3453 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  73A000014,  #221,  222  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0018,  5)  MC621-0059  6)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-156 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/17/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/3 

MDAC  ID: 

255 

ABORT: 

/NA 

ITEM: 

COUPLING  - HIGH- 

•POINT  BLEED  TEST  PORT 

FAIUJRE  MODE:  FAILS  TO  CLOSE, 

FAILS  TO  OPEN,  RESTRICTED 

FLOW 

LEAD  ANALYST;  C.D.  PRUST 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  HIGH-POINT  BLEED  TEST  PORT  COUPLING 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO; 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

> 
1 — 1 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3403 , -3453 

CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #221,  222  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0018,  5)  MC621-0059  6)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-157 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

256 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

1/1 


ITEM:  VALVE  - BI PROPELLANT  VALVE 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN,  RESTRICTED 

FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VLV 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS 

: 1/1 

LIFTOFF; 

3/2R 

TAL: 

1/1 

ONORBIT; 

2/2 

AOA: 

3/3 

DEORBIT; 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  1181700 

CAUSES;  CONTAMINATION,  PIECE-PART 

STRUCTURAL 

FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING 

DEFECT,  HIGH 

PRESSURE 

EFFECTS/RATIONALE ; 

WITH  A FAILED  CLOSED  BIPROP  VALVE  RESULTING  IN  LOSS  OF  ONE 
ENGINE,  ONE  FAILURE  (BIPROP  VALVE  IN  OTHER  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST 
FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  LOSS  OF  ONE  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME- 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014,  #456  2)  JSC  18958  3)  MC621-0009  4) 

VS70-943099,43AD,BD  5)  JSC  12770  6)  JSC  11174,11.3  7)  JSC 

19950  8)  1181700  9)  1181710 


REPORT  DATE  02/05/87 


C-158 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

257 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  VALVE  - BIPROPELLANT  VALVE 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VLV 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/S AFING: 
REDUNDANCY  SCREENS: 

2/lR 
A [ 1 ] 

B [ P ] 

C ( P ] 

LOCATION: 

PART  NUMBER:  1181700 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING  DEFECT,  HIGH  PRESSURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  SAVING  OF  AFFECTED  ENGINE  FOR  DEORBIT. 
WITH  FIRST  FAILURE,  ONE  FAILURE  (SERIES  VALVE)  AWAY  FROM  POSSIBLE 
LOSS  OF  LIFE/VEHICLE.  CLOSE  TANK  ISOL  VALVES  TO  SHUTDOWN  ENGINE. 
ATTEMPTING  TO  RESTART  ENGINE  WITH  TANK  ISOL  VALVES  RESULTS  IN 
POSSIBLE  DAMAGE  TO  AND  LOSS  OF  ENGINE  AND  INABILITY  TO 
USE/DEPLETE  PROP  IN  AFFECTED  POD.  ANY  USE  OF  PROP  IN  POD 
INITIATES  FLOW  THROUGH  AFFECTED  ENGINE.  POSSIBLE  HAZARD  TO 
GROUND  CREW.  INABILITY  TO  STOP  DUMP  DURING  RTLS  OR  TAL  RESULTS 
IN  POSSIBLE  VIOLATIONS  OF  SINGLE  ENGINE  ROLL  CONTROL  AND  ORBITER 
MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  73A000014,  #456  2)  JSC  18958  3)  MC621-0009  4) 

VS70-943099,43AD,BD  5)  JSC  12770  6)  JSC  11174,11.3  7)  JSC 

19950  8)  1181700  9)  1181710  10)  FLIGHT  RULES  6-6,  6-26 


REPORT  DATE  02/05/87 


C-159 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

258 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT:  1/1 


ITEM;  VALVE  - BI PROPELLANT  VALVE 

FAILURE  MODE;  FAILS  MID  TRAVEL,  PARTIALLY  OPEN/CLOSED 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VLV 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH; 

2/lR 

RTLS 

: 1/1 

LIFTOFF; 

3/2R 

TAL: 

1/1 

ONORBIT; 

2/2 

AOA: 

2/lR 

DEORBIT; 

2/lR 

ATO: 

2/lR 

LANDING/SAFING; 

2/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER;  1181700 

CAUSES;  CONTAMINATION,  PIECE-PART 

STRUCTURAL 

FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING 

DEFECT,  HIGH 

PRESSURE 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  AFFECTED  ENGINE.  WITH  FIRST 
FAILURE,  ONE  FAILURE  (BIPROP  VALVE  IN  OTHER  POD)  AWAY  FROM  LOSS 
OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST  FAILURE 
DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS.  SUBSEQUENT  LEAK  OR 
FAILURE  TO  CLOSE  OF  SERIES  VALVE  RESULTS  IN  HAZARD  TO  GROUND 
CREW,  USE  OF  TANK  ISOL  VALVES  TO  SHUTDOWN  ENGINE,  AND  INABILITY 
TO  USE/DEPLETE  PROP  IN  AFFECTED  POD  TO  AVOID  FLOW  THROUGH 
AFFECTED  ENGINE. 


REFERENCES:  1)  73A000014,  #456  2)  JSC  18958  3)  MC621-0009  4) 

VS70-943099,43AD,BD  5)  JSC  12770  6)  JSC  11174,11.3  7)  JSC 

19950  8)  1181700  9)  1181710  10)  FLIGHT  RULE  6-3, H 


REPORT  DATE  02/05/87 


C-160 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

259 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  VALVE  - BIPROPELLANT  VALVE 

FAILURE  MODE:  INTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VLV 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

2/lR 

LIFTOFF: 

2/lR 

TAL: 

2/lR 

ONORBIT: 

2/lR 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  1181700 

CAUSES:  SEAL  FAILURES 

, PIECE-PART 

STRUCTURAL 

FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING 

DEFECT,  HIGH 

PRESSURE 

EFFECTS/RATIONALE : 

WITH  LEAKAGE  PAST  ONE  BALL  VALVE,  ONE  FAILURE  (LEAKAGE  PAST 
SERIES  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE.  MIGRATION 
INTO  ENGINE  AND  FREEZING  OF  PROP  MAY  LEAD  TO  ENGINE  DAMAGE  OR 
EXPLOSION  UPON  START  ATTEMPT  RESULTING  IN  FIRE  HAZARD  AND 
POSSIBLE  DAMAGE  TO  POD  COMPONENTS  AND  VEHICLE  STRUCTURE.  LEAKAGE 
PAST  BOTH  VALVES  ALSO  PRESENTS  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014,  #456  2)  JSC  18958  3)  MC621-0009  4) 

VS70-943099,43AD,BD  5)  JSC  12770  6)  JSC  11174,11.3  7)  JSC 

19950  8)  1181700  9)  1181710 


REPORT  DATE  02/05/87 


C-161 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

260 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

1/1 

1/1 


ITEM:  VALVE  - BIPROPELLANT  VALVE 

FAILURE  MODE:  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VLV 

6) 

7) 

8) 

9) 


CRITICALITIES 

[GHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

1/1 

AOA: 

DEORBIT: 

1/1 

ATO: 

LANDING/SAFING: 

1/1 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [ ] B [ ] C [ 

LOCATION: 

PART  NUMBER:  1181700 


CAUSES:  HOUSING  STRUCTURAL  FAILURE,  SEAL  FAILURES,  MATERIAL 

DEFECT,  WELD  FAILURE,  MANUFACTURING  DEFECT,  HIGH  PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND 
LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW. 


REFERENCES:  1)  73A000014,  #456  2)  JSC  18958  3)  MC621-0009  4) 

VS70-943099,43AD,BD  5)  JSC  12770  6)  JSC  11174,11.3  7)  JSC 

19950  8)  1181700  9)  1181710 


REPORT  DATE  02/05/87 


C-162 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

261 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  VALVE  - BIPROPELLANT  VALVE 

FAILURE  MODE;  DELAYED  OPERATION 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VLV 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

1/1 

LIFTOFF: 

3/2R 

TAL: 

1/1 

ONORBIT; 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO; 

2/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  1181700 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING  DEFECT,  HIGH  PRESSURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  MAY  CAUSE  LOW  INITIAL  FUEL  AND  OX  FLOW  RATES  TO 
ENGINE  RESULTING  IN  POSSIBLE  DAMAGE  TO  AND  LOSS  OF  ENGINE.  WITH 
FIRST  FAILURE,  ONE  FAILURE  (BIPROP  VALVE  IN  REDUNDANT  POD)  AWAY 
FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES. 
FIRST  FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO 
COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  73A000014,  #456  2)  JSC  18958  3)  MC621-0009  4) 

VS70-943099,43AD,BD  5)  JSC  12770  6)  JSC  11174,11.3  7)  JSC 

19950  8)  1181700  9)  1181710 


REPORT  DATE  02/05/87 


C-163 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

262 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  VALVE  - BIPROP  CAVITY  PRESSURE  RELIEF 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  OPEN  AT  SPECIFIED  PSID 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  CAVITY  PRESSURE  RELIEF  VALVE 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

2/2 

AOA: 

DEORBIT: 

2/lR 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 1 ] B [ F ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  INABILITY  TO  RELIEVE  OVERPRESSURIZATION, 
POSSIBLE  DAMAGE  TO  BIPROP  VALVES,  AND  LOSS  OF  AFFECTED  ENGINE. 
WITH  FIRST  FAILURE,  ONE  FAILURE  (SAME  FUNCTION  IN  OTHER  POD) 

AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH 
ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO 
COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS.  FIRST  FAILURE  COULD  RESULT  IN  LEAKAGE  OF  PROP. 

REFERENCES:  1)  MC621-0009  2)  JSC  11174,11.3  3)  VS70- 

943099, 43AD,BD 


REPORT  DATE  02/05/87 


C-164 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/17/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/3 

MDAC  ID; 

263 

ABORT; 

3/3 

ITEM: 

VALVE  - BIPROP 

CAVITY  PRESSURE  RELIEF 

FAILURE  MODE;  FAILS  TO  CLOSE, 

VALVE  FAILS 

TO  RESEAT 

LEAD  ANALYST:  C.D.  PRUST 

SUBSYS  LEAD: 

D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  CAVITY  PRESSURE  RELIEF  VALVE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 

CAUSES;  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 
MANUFACTURING  DEFECT 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT  OTHER  THAN  LOSS  OF  REDUNDANCY. 
FAILURE  OF  A NONREDUNDANT  ITEM  REQUIRED  FOR  EFFECTS  TO  BE 
MANIFESTED.  A FAILED  OPEN  RELIEF  VALVE  ALLOWS  PROP  TO  BYPASS 
FIRST  BIPROP  VALVE  AND,  THEREFORE,  RESULTS  IN  LOSS  OF  BIPROP 
VALVE  SERIES  REDUNDANCY.  FAILURE  TO  CLOSE  OR  LEAKAGE  OF  SERIES 
BIPROP  VALVE  WOULD  RESULT  IN  POSSIBLE  LOSS  OF  LIFE/VEHICLE. 
(CRIT  2/lR  FOR  NOMINAL  AND  ABORTS) 

REFERENCES:  1)  MC621-0009  2)  JSC  11174,11.3  3)  VS70- 

943099, 43AD,BD 


REPORT  DATE  02/05/87 


C-165 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

264 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  VALVE  - BIPROP  CAVITY  PRESSURE  RELIEF 

FAILURE  MODE:  INTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  CAVITY  PRESSURE  RELIEF  VALVE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL; 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  SEAL  FAILURE,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT  OTHER  THAN  LOSS  OF  REDUNDANCY. 
FAILURE  OF  A NON-REDUNDANT  ITEM  REQUIRED  FOR  EFFECTS  TO  BE 
MANIFESTED.  A LEAKING  RELIEF  VALVE  ALLOWS  PROP  TO  BYPASS  FIRST 
BIPROP  VALVE  AND,  THEREFORE,  RESULTS  IN  LOSS  OF  BIPROP  VALVE 
SERIES  REDUNDANCY.  FAILURE  TO  CLOSE  OR  LEAKAGE  OF  SERIES 
BIPROP  VALVE  WOULD  RESULT  IN  POSSIBLE  LOSS  OF  LIFE/VEHICLE. 
(CRIT  2/lR  FOR  NOMINAL  AND  ABORTS) 

REFERENCES:  1)  MC621-0009  2)  JSC  11174,11.3  3)  VS70- 

943099, 43AD,BD 


REPORT  DATE  02/05/87 


C-166 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

265 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


item:  valve  - BIPROP  CAVITY  PRESSURE  RELIEF 

FAILURE  MODE:  STRUCTURAL  FAILURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  CAVITY  PRESSURE  RELIEF  VALVE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

1/1 

RTLS 

LIFTOFF: 

1/1 

TAL: 

ONORBIT: 

1/1 

AOA: 

DEORBIT; 

1/1 

ATO: 

LANDING/ SAFING: 

1/1 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [ ] 


LOCATION: 

PART  NUMBER:  MC621-0009 

CAUSES:  HOUSING  STRUCTURAL  FAILURE,  SEAL  FAILURES,  MATERIAL 

DEFECT,  WELD  FAILURE,  MANUFACTURING  DEFECT,  HIGH  PRESSURE 


EFFECTS/RATIONALE:  

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND 
LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO 
GROUND  CREW. 


REFERENCES;  1)  MC621-0009  2)  JSC  11174,11.3  3)  VS70- 

943099, 43AD,BD 


REPORT  DATE  02/05/87 


C-167 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/17/86 

OMS 

266 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM; 

FAILURE  MODE; 
NORMAL  PS  ID 


VALVE  - BIPROP  CAVITY  PRESSURE  RELIEF 

FAILS  OUT  OF  TOLERANCE,  OPERATES  AT  LOWER  THAN 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  CAVITY  PRESSURE  RELIEF  VALVE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING ; 

REDUNDANCY  SCREENS; 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA; 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ ] 

B [ ] 

c [ 3 

LOCATION: 

PART  NUMBER;  MC62 1-0009 


CAUSES;  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

NO  EFFECT  IF  VALVE  OPENS  AND  CLOSES  AT  LOWER  THAN  SPECIFIED  PSID 


REFERENCES;  1)  MC621-0009  2)  JSC  11174  11  3 

943099, 43AD,BD  -lxj./4,11.3 


3)  VS70- 


REPORT  DATE  02/05/87 


C-168 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
2/lR 
2/lR 

PORT 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 
3)  OME  SUBSYSTEM 
4}  OME  ASSEMBLY 

5)  BIPROP  VALVE  DRAIN/PURGE  TEST  PORT  COUPLING 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

267 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


COUPLING  - BIPROP  VALVE  DRAIN/PURGE  TEST 
EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

2/lR 

LIFTOFF: 

2/lR 

TAL: 

2/lR 

ONORBIT: 

2/lR 

AO  A: 

2/lR 

DEORBIT: 

LANDING/SAFING: 

2/lR 

2/lR 

ATO: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3402 , -3452 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING,  HIGH  PRESSURE 

EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
RESULTING  IN  FIRE/ EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014,  #231,  234  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0018,  5)  MC621-0059  6)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-169 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
/NA 

PORT 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VALVE  DRAIN/PURGE  TEST  PORT  COUPLING 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

268 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  COUPLING  - BIPROP  VALVE  DRAIN/PURGE  TEST 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FXWC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 
LANDING/ SAFING: 

/NA 

3/3 

ATO: 

/NA 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3402,-3452 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING  ' 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #231,  234  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0018,  5)  MC621-0059  6)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-170 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID; 


12/17/86 

OMS 

269 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

/NA 


ITEM:  COUPLING  - BIPROP  VALVE  DRAIN/PURGE  TEST  PORT 

FAILURE  MODE;  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VALVE  DRAIN/PURGE  TEST  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT; 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER:  MC276-0018-3402,-3452 


CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  73A000014,  #231,  234  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0018,  5)  MC621-0059  6)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-171 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  12/17/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT;  1/1 

MDAC  ID;  270  ABORT;  1/1 

ITEM;  OME  ALIGNMENT  BELLOWS 

FAILURE  MODE;  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 
LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  OME  ALIGNMENT  BELLOWS 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS; 

1/1 

LIFTOFF: 

1/1 

TAL; 

1/1 

ONORBIT: 

1/1 

AO  A: 

1/1 

DEORBIT; 

1/1 

ATO; 

1/1 

LANDING/SAFING; 

1/1 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION; 

PART  NUMBER;  MC621-0059 

CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT,  WELD 
FAILURE,  MANUFACTURING  DEFECT,  MISHANDLING,  MECHANICAL  SHOCK, 
HIGH  PRESSURE 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND 
LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSIVE  HAZARD  AND  HAZARD  TO 
GROUND  CREW.  LOCATED  BETWEEN  BI-PROP  VALVES  AND  ENGINE  INLET. 


REFERENCES:  1)  VS70-943099,43AD,BD  2)  JSC  12770 


REPORT  DATE  02/05/87 


C-172 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

271 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

/NA 


ITEM:  OME  ALIGNMENT  BELLOWS 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  PHYSICAL  BINDING/ JAMMING, 

NO  BELLOWS  ANGULAR  DEFLECTION 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  OME  ALIGNMENT  BELLOWS 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC62 1-0059 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MANUFACTURING  DEFECT, 

MECHANICAL  SHOCK,  MISHANDLING,  CONTAMINATION 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 

LOCATED  BETWEEN  BI-PROP  VALVES  AND  ENGINE  INLET. 


REFERENCES:  1)  VS70-943099,43AD,BD  2)  JSC  12770 


REPORT  DATE  02/05/87 


C-173 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

272 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  OME  ALIGNMENT  BELLOWS 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  OME  ALIGNMENT  BELLOWS 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

HDW/FUNC 

3/3 

3/2R 

2/2 

2/lR 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

1/1 

1/1 

2/lR 

2/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0059 


CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

WITH  FIRST  FAILURE  AND  RESULTING  LOSS  OF  AFFECTED  ENGINE,  ONE 
FAILURE  (RESTRICTION  IN  ALIGNMENT  BELLOWS  IN  OTHER  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST 
FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  LOSS  OF  ENGINE  AND  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS.  LOCATED  BETWEEN  BI-PROP 
VALVES  AND  ENGINE  INLET. 


REFERENCES:  1)  VS70-943099,43AD,BD  2)  JSC  12770 


REPORT  DATE  02/05/87 


C-174 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

12/30/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT; 

2/lR 

MDAC  ID: 

273 

ABORT; 

2/lR 

ITEM; 

COUPLING 

- BIPROP  VALVE  DRAIN  PORT 

FAILURE  MODE;  EXTERNAL 

LEAKAGE 

LEAD  ANALYST;  C.D.  PRUST 

SUBSYS  LEAD; 

D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VALVE  DRAIN  PORT  COUPLING 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

2/lR 

RTLS: 

2/lR 

LIFTOFF; 

2/lR 

TAL; 

2/lR 

ONORBIT; 

2/lR 

AO  A: 

2/lR 

DEORBIT; 

LANDING/SAFING; 

2/lR 

2/lR 

ATO: 

2/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-0402,-0452 

CAUSES;  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 
FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 

EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
RESULTING  IN  FIRE/ EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014,  #232,232A,233,233A  2)  VS70-431099  3) 

MC621-0059  4)  MC276-0018  5)  VS70-943099, 43AD, BD  6)  JSC 

11174,11.3 


REPORT  DATE  02/05/87 


C-175 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

274 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM: 

FAILURE  MODE: 


COUPLING  - BIPROP  VALVE  DRAIN  PORT 
FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VALVE  DRAIN  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF;  /NA  TAL: 

ONORBIT;  /NA  AOA; 

DEORBIT:  /NA  ATO; 

LANDING/ SAFING:  3/3 


REDUNDANCY  SCREENS;  A [ ] 

LOCATION; 

PART  NUMBER:  MC276-0018-0402, -0452 


HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


C [ 3 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE, 

MISHANDLING 


PROCEDURAL  ERROR, 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES: 

MC621-0059 

11174,11.3 


1)  73A000014, 
4)  MC276-0018 


#232,232A,233,233A  2)  VS70-431099 

5)  VS70-943099,43AD,BD  6)  JSC 


3) 


REPORT  DATE  02/05/87 


C-176 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

275 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING  - BIPROP  VALVE  DRAIN  PORT 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  CLOSE,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BIPROP  VALVE  DRAIN  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B C ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-0402 , -0452 

CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #232,232A,233,233A  2)  VS70-431099  3) 

MC621-0059  4)  MC276-0018  5)  VS70-943099, 43AD, BD  6)  JSC 

11174,11.3 


REPORT  DATE  02/05/87 


C-177 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

276 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

1/1 


ITEM: 

NTO 

FAILURE  MODE: 


PROPELLANT  LINES  AND  MECHANICAL  FITTINGS -MMH  AND 
RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  MMH  AND  NTO  PROPELLANT  LINES  AND  MECHANICAL  FITTINGS 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 

HDW/FUNC 

3/3 

3/2R 

2/2 

2/lR 

3/3 

ABORT 
RTLS; 
TAL: 
AO  A: 
ATO: 

HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  MC62 1-0059 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE ; 

BIPROP  PRESSURE  RELIEF  PATH  LINE.  FIRST  FAILURE  RESULTS  IN 
INABILITY  TO  RELIEVE  OVERPRESSURIZATION  AND  ALLOWS  POSSIBLE 
DAMAGE  TO  BIPROP  VALVES  RESULTING  IN  POSSIBLE  LOSS  OF  AFFECTED 
ENGINE.  WITH  FIRST  FAILURE,  ONE  FAILURE  (SAME  FUNCTION  IN  OTHER 
POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH 
ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO 
COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS 
FIRST  FAILURE  COULD  RESULT  IN  LEAKAGE  OF  PROP. 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-178 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

277 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  COUPLING-OMS  ENGINE  TRICKLE  PURGE  PORT 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  OMS  ENGINE  TRICKLE  PURGE  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

2/lR 

LIFTOFF: 

2/lR 

TAL: 

2/lR 

ONORBIT: 

2/lR 

AOA: 

2/lR 

DEORBIT: 

LANDING/SAFING: 

2/lR 

2/lR 

ATO: 

2/lR 

REDUNDANCY  SCREENS: 

> 
1 — 1 

i 1 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3401, -3451 


CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 


EFFECTS/RATIONALE : 

WITH  FAILURE  OF  POPPET  SEAL,  ONE  FAILURE  (CAP  SEAL)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  AND  LEAKAGE  OF  PROP 
RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  73A000014,  #229,  230  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0018,  5)  MC621-0059  6)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-179 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

278 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-OMS  ENGINE  TRICKLE  PURGE  PORT 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  OMS  ENGINE  TRICKLE  PURGE  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING ; 

HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0018-3401, -3451 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE, 

MISHANDLING 


PROCEDURAL  ERROR, 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #229,  230  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0018,  5)  MC621-0059  6)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-180 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

279 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-OMS  ENGINE  TRICKLE  PURGE  PORT 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  OMS  ENGINE  TRICKLE  PURGE  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT; 

/NA 

ATO: 

/NA 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER:  MC276-0018-3401, -3451 


CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #229,  230  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0018,  5)  MC621-0059  6)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-181 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID; 


12/17/86 

OMS 

280 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT;  1/1 


ITEM:  PLATELET  INJECTOR  ASSEMBLY 

FAILURE  MODE:  STRUCTURAL  FAILURE,  BURN  THROUGH 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  PLATELET  INJECTOR  ASSEMBLY 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/ SAFING: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

1/1 

1/1 

TAL; 

1/1 

1/1 

AOA: 

1/1 

1/1 

ATO: 

1/1 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ 

LOCATION; 

PART  NUMBER;  1181220 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  HIGH  TEMPERATURE, 

COMBUSTION  ANOMALIES,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  POSSIBLE 
EXPLOSION,  FIRE,  AND  DAMAGE  TO  SURROUNDING  COMPONENTS  AND  VEHICLE 
STRUCTURE . 


REFERENCES;  1)  JSC  18958  2)  MC621-0009  3)  1181220  4)  JSC 

12770 


REPORT  DATE  02/05/87 


C-182 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

281 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  PLATELET  INJECTOR  ASSEMBLY 

FAILURE  MODE;  STRUCTURAL  FAILURE,  INTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  PLATELET  INJECTOR  ASSEMBLY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT; 

1/1 

ATO: 

1/1 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  1181220 

CAUSES;  DETONATION,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 
DEFECT,  MANUFACTURING  DEFECT 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  MIXING  OF 
HYPERGOLIC  PROPELLANTS  WITHIN  INJECTOR  RESULTING  IN  EXPLOSION, 
FIRE,  AND  POSSIBLE  DAMAGE  TO  SURROUNDING  COMPONENTS  AND  VEHICLE 
STRUCTURE . 


REFERENCES;  1)  JSC  18958  2)  MC621-0009  3)  1181220  4)  JSC 

12770 


REPORT  DATE  02/05/87 


C-183 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

282 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  PLATELET  INJECTOR  ASSEMBLY 

FAILURE  MODE:  RESTRICTED  FLOW,  CLOGGED 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  PLATELET  INJECTOR  ASSEMBLY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  1181220 

CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS 

IN  LOSS  OF 

AFFECTED  ENGINE. 

. WITH  f: 

FAILURE,  ONE  FAILURE  (RESTRICTION  IN  ASSEMBY  IN  OTHER  POD)  AWAY 
FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES. 
FIRST  FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  ENGINE  AND  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  1181220  4)  JSC 

12770 


REPORT  DATE  02/05/87 


C-184 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
1/1 
1/1 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 
3)  OME  SUBSYSTEM 
4}  OME  ASSEMBLY 

5)  COMBUSTION  CHAMBER 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF; 

1/1 

TAL; 

1/1 

ONORBIT; 

1/1 

AO  A; 

1/1 

DEORBIT; 

1/1 

ATO; 

1/1 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  MC621-0009 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

283 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


ITEM:  COMBUSTION  CHAMBER 

FAILURE  MODE:  STRUCTURAL  FAILURE,  BURN  THROUGH 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  HIGH  TEMPERATURE, 

MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  COMBUSTION  ANOMALIES, 
INADEQUATE  COOLING 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  POSSIBLE 
EXPLOSION,  FIRE,  AND  DAMAGE  TO  SURROUNDING  COMPONENTS  AND  VEHICLE 
STRUCTURE. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  JSC  19950  4)  JSC 

12770 


REPORT  DATE  02/05/87 


C-185 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

284 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  COMBUSTION  CHAMBER 

FAILURE  MODE:  STRUCTURAL  FAILURE,  FRACTURE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  COMBUSTION  CHAMBER 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS; 

LIFTOFF; 

1/1 

TAL; 

ONORBIT; 

1/1 

AOA: 

DEORBIT; 

1/1 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 

LOCATION; 

PART  NUMBER:  MC621-0009 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [ ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT, 

MANUFACTURING  DEFECT 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  POSSIBLE 
EXPLOSION,  FIRE,  AND  DAMAGE  TO  SURROUNDING  COMPONENTS  AND  VEHICLE 


REFERENCES: 

12770 


1)  JSC  18958 


2)  MC621-0009  3)  JSC  19950  4)  JSC 


REPORT  DATE  02/05/87 


C-186 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

285 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  NOZZLE  EXTENSION 

FAILURE  MODE:  STRUCTURAL  FAILURE  (BURN  THROUGH,  FRACTURE, 

DEFORMATION,  FLANGE  LEAKAGE) 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  NOZZLE  EXTENSION 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

1/1 

1/1 

TAL: 

1/1 

1/1 

AOA: 

1/1 

1/1 

ATO: 

1/1 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  1181900 


CAUSES:  PIECE-PART  STRUCTURAL  FAILtJRE,  MATERIAL  DEFECT,  SEAL 

FAILURE,  MANUFACTURING  DEFECT,  MISHANDLING,  VIBRATION,  MECHANICAL 
SHOCK 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  IMPINGEMENT 
OF  EXHAUST  GASES  ONTO  ORBITER  SURFACES  (ARCS  HOUSING,  ACCESS 
PANELS,  VERTICAL  STABILIZER)  RESULTING  IN  POSSIBLE  EXPLOSION, 
FIRE,  AND/OR  VEHICLE  STRUCTURAL  DAMAGE  DURING  ENGINE  FIRING  OR 
UPON  ENGINE  START. 


REFERENCES:  1)  1181900  2)  JSC  18958  3)  73A000014,  #459  4) 

VS70-431099,43AE,BE 


REPORT  DATE  02/05/87 


C-187 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

286 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

1/1 


ITEM:  NOZZLE  EXTENSION 

FAILURE  MODE:  STRUCTURAL  FAILURE,  BUCKLING  (DURING  ASCENT) 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  NOZZLE  EXTENSION 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF; 

3/2R 

TAL: 

1/1 

ONORBIT; 

2/2 

AOA: 

2/lR 

DEORBIT: 

LANDING/SAFING: 

2/lR 

3/3 

ATO; 

2/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  1181900 


CAUSES:  TVC  FAILURE 

EFFECTS/RATIONALE : 

FAILURE  DURING  ASCENT  DETECTABLE  THROUGH  TVC  POSITION  SENSORS. 
FIRST  FAILURE  RESULTS  IN  LOSS  OF  AFFECTED  ENGINE.  WITH  FIRST 
FAILURE,  ONE  FAILURE  (OTHER  NOZZLE)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST  FAILURE  DURING 
RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  1181900  2)  JSC  18958  3)  73A000014,  #459  4) 

VS70-431099,43AE,BE  5)  FLIGHT  RULE  (TVC) 


REPORT  DATE  02/05/87 


C-188 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/19/86 

OMS 

287 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT;  3/lR 


ITEM:  COUPLING-GN2  TANK  FILL/ VENT 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  TANK  FILL/VENT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT; 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  MC276-0017-0401 


CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 


EFFECTS/RATIONALE ; 

FAILURE  OF  FIRST  SEAL  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ALL  GN2  PRESSURANT 
AND  LOSS  OF  BOTH  ENGINES.  ACCUMULATOR  PROVIDES  FAIL-SAFE 
PROTECTION  FOR  UPSTREAM  FAILURES  AND  IS  CONSIDERED  REDUNDANT. 


REFERENCES;  1)  73A000014,  #459  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0017  5)  MC621-0009 


REPORT  DATE  02/05/87 


C-189 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/19/86 

OMS 

288 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


ITEM;  COUPLING-GN2  TANK  FILL/VENT 

FAILURE  MODE:  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  TANK  FILL/ VENT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

/NA 

LIFTOFF; 

/NA 

TAL: 

/NA 

ONORBIT; 

/NA 

AOA: 

/NA 

DEORBIT: 
LANDING/S AFING: 

/NA 

3/3 

ATO; 

/NA 

REDUNDANCY  SCREENS; 

A [ ] 

B C ] 

c [ ] 

LOCATION; 

PART  NUMBER;  MC276-0017-0401 


MISHANDLING^^^”^^^  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #459  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0017  5)  MC621-0009 


REPORT  DATE  02/05/87  C-190 


HDW/FUNC 

3/3 

/NA 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

289 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING-GN2  TANK  FILL/ VENT 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  CLOSE,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  TANK  FILL/VENT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO: 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC276-0017-0401 

CAUSES:  FILTER  BLOCKAGE,  PIECE-PART  STRUCTURAL  FAILURE, 

PROCEDURAL  ERROR,  CONTAMINATION 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014,  #459  2)  VS70-431099  3)  VS70- 

943099, 43AD,BD  4)  MC276-0017  5)  MC621-0009 


REPORT  DATE  02/05/87 


C-191 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

290 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  GN2  pressure  LINES  AND  MECHANICAL  FITTINGS 

FAILURE  MODE:  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

HDW/FUNC 

3/lR 

3/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS:  A [ 2 ] 


B [ F ] C [ P ] 


LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE, 

FAILURE,  SEAL  FAILURES,  MATERIAL  DEFECT. 
HIGH  PRESSURE 


MECHANICAL  SHOCK,  WELD 
MANUFACTURING  DEFECT, 


EFFECTS/RATIONALE : 

FILL  PORT  TO  FILL  VALVE.  FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF 
Ap,  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
ALL  GN2  PRESSURANTS  AND  LOSS  OF  START  CAPABILITY  FOR  BOTH 
ENGINES.  ACCUMULATOR  PROVIDES  FAIL-SAFE  PROTECTION  FOR  UPSTREAM 

and  is  considered  redundant.  CRIT  2/lR  FOR  MANUAL  TAL 
CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT.  watjuai.  TAL 


REFERENCES;  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-192 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

291 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 

CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE : 

FILL  PORT  TO  TANK.  NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-193 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID; 


12/17/86 

OMS 

292 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  /NA 


ITEM;  VALVE-GN2  TANK  FILL/ VENT 

FAILURE  MODE;  FAILS  TO  OPEN,  FAILS  TO  CLOSE,  RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  TANK  FILL/VENT  VALVE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRE LAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 

HDW/FUNC 

3/3 

/NA 

/NA 

/NA 

3/3 

ABORT 
RTLS: 
TAL; 
AO  A; 
ATO; 

HDW/FUNC 

/NA 

/NA 

/NA 

/NA 

REDUNDANCY  SCREENS; 

A [ ] 

B C ] 

c [ ] 

LOCATION: 

PART  NUMBER;  MC62 1-0009 


^USES;  CONTAMINATION,  PIECE-PART  STRUCTORAL  FAILURE,  LOSS  OF 
INPUT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES;  1)  JSC  18958  2)  MC621-0009 

4)  JSC  11174,11.3  5)  JSC  12770 


3)  VS70-943099,43AD,BD 


REPORT  DATE  02/05/87 


C-194 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

293 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


ITEM:  VALVE-GN2  TANK  FILL/VENT 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  TANK  FILL/VENT  VALVE 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS:  A [ 1 ] B [ P ] 


C [ P ] 


LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  HOUSING  STRUCTURAL  FAILURE,  SEAL  FAILURES,  WELD  FAILURE, 

MATERIAL  DEFECT,  HIGH  PRESSURE,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

WITH  LOSS  OF  GN2  IN  TANK,  REMAINING  ENGINE  START  (IN  ACCUMULATOR) 
SAVED  FOR  DEORBIT.  NO  EFFECT  ON  MISSION.  LOSS  OF  ALL  REDUNDANCY 
IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  START  CAPABILITY 
FOR  BOTH  ENGINES.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE 
FAILURE  (ACCUMULATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  LOSS  OF  ENGINE  AND  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL 
AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS.  ACCUMULATOR  PROVIDES 
FAIL-SAFE  PROTECTION  FOR  UPSTREAM  FAILURES  AND  IS  CONSIDERED 
REDUNDANT.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099 , 43AD,  BD 

4)  JSC  11174,11.3  5)  JSC  12770  6)  FLIGHT  RULE  6-20 


REPORT  DATE  02/05/87 


C-195 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


12/17/86 

OMS 

294 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


ITEM;  VALVE-GN2  TANK  FILL/ VENT 

FAILURE  MODE:  INTERNAL  LEAKAGE,  FAILS  TO  REMAIN  CLOSED 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  TANK  FILL/VENT  VALVE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL; 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


LOCATION; 

PART  NUMBER;  MC621-0009 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/lR 


C [ P ] 


CAUSES; 

FAILURE, 


CONTAMINATION,  SEAL  FAILURE,  PIECE-PART  STRUCTURAL 
MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  HIGH  PRESSURE 


EFFECTS/RATIONALE : 

FAILURE  OF  POPPET  SEAL  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS 
toIq  life/vehicle  DUE  TO  LOSS  OF  ALL  GN2  PRESSURE  AND 

MSS  OF  START  CAPABILITY  FOR  BOTH  ENGINES.  ACCUMULATOR  PROVIDES 
PROTECTION  FOR  UPSTREAM  FAILURES  AND  IS  CONSIDERED 

REDUNDANT • 


^FERENCES;  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099,43AD  BD 

4)  JSC  11174,11.3  5)  JSC  12770  6)  FLIGHT  RULE  6-20 


REPORT  DATE  02/05/87 


C-196 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/17/86 

OMS 

295 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  TANK-GN2  STORAGE 

FAILURE  MODE:  RUPTURE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  STORAGE  TANK 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

1/1 

RTLS: 

1/1 

LIFTOFF: 

1/1 

TAL: 

1/1 

ONORBIT: 

1/1 

AOA: 

1/1 

DEORBIT: 

1/1 

ATO: 

1/1 

LANDING/ SAFING: 

1/1 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  HIGH  PRESSURE,  HIGH 

TEMPERATURE,  WELD  FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  POTENTIAL 
SHRAPNEL  DAMAGE  TO  SURROUNDING  COMPONENTS  AND  VEHICLE  STRUCTURE. 


REFERENCES:  1)  MC621-0009  2)  JSC  18958  3)  VS70-943099, 43AD,BD 

4)  JSC  11174,11.3  5)  JSC  12770  6)  JSC  19950 


REPORT  DATE  02/05/87 


C-197 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/21/86 

OMS 

296 


ITEM:  TANK-GN2  STORAGE 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  STORAGE  TANK 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  HIGH  PRESSURE,  HIGH 

TEMPERATURE,  WELD  FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE ; 

WITH  LOSS  OF  GN2  TANK,  REMAINING  ENGINE  START  (IN  ACCUMULATOR) 
SAVED  FOR  DEORBIT.  NO  EFFECT  ON  MISSION.  LOSS  OF  ALL  REDUNDANCY 
IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  START  CAPABILITY 
FOR  BOTH  ENGINES.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE 
FAILURE  (ACCUMULATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  LOSS  OF  ENGINE  AND  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL 
AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS.  ACCUMULATOR  PROVIDES 
FAIL-SAFE  PROTECTION  FOR  UPSTREAM  FAILURES  AND  IS  CONSIDERED 
REDUNDANT.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT. 


REFERENCES:  1)  MC621-0009  2)  JSC  18958  3)  VS70-943099 , 43AD,  BD 

4)  JSC  11174,11.3  5)  JSC  12770  6)  JSC  19950  7)  FLIGHT  RULE  6- 

20 


REPORT  DATE  02/05/87 


C-198 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/07/87 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/lR 

MDAC  ID: 

297 

ABORT: 

2/lR 

ITEM: 

PNEUMATIC 

PACK  ASSEMBLY  HOUSING 

FAILURE  MODE:  STRUCTURAL 

FAILURE,  EXTERNAL 

LEAKAGE 

LEAD  ANALYST:  C.D.  PRUST 

SUBSYS  LEAD; 

D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  6N2  ASSEMBLY 

5)  PNEUMATIC  PACK  ASSEMBLY  HOUSING 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  HOUSING  STRUCTURAL  FAILURE,  MATERIAL  DEFECT,  SEAL 

FAILURES,  HIGH  PRESSURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  REMAINING  ENGINE  START  (IN 
ACCUMULATOR)  SAVED  FOR  DEORBIT.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  START  CAPABILITY  FOR 
BOTH  ENGINES.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE 
(ACCUMULATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
OF  ONE  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL 
OMS  DUMP.  ACCUMULATOR  PROVIDES  FAIL-SAFE  PROTECTION  FOR 
UPSTREAM  FAILURES  AND  IS  CONSIDERED  REDUNDANT.  CRIT  1/1  FOR 
MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT.  ALL 
COMPONENTS  ASSEMBLED  ON  HOUSING  ATTACHED  WITH  AT  LEAST  ONE  SEAL. 

REFERENCES:  1)  MC621-0009  2)  JSC  18958  3)  VS70-943099,43AD,BD 

4)  JSC  11174,11.3  5)  JSC  12770  6)  JSC  19950  7)  FLIGHT  RULE  6- 

20 


REPORT  DATE  02/05/87 


C-199 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

298 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  PNEUMATIC  PACK  HOUSING  ASSEMBLY 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PNEUMATIC  PACK  HOUSING  ASSEMBLY 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

2/2 

AOA: 

2/lR 

ATO: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

2/lR 


REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE: 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  ENGINE  AFTER  ACCUMULATOR 
DEPLETION  DUE  TO  INABILITY  TO  REPRESSURIZE  ACCUMULATOR.  FAILURE 

until  engine  is  lost,  with  first  failure,  one 

(SAME  FAILURE  IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  CRIT  1/1  FOR  MANUAL 
TAL  CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 


^FERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-200 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

299 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT;  2/lR 


ITEM:  VALVE-GN2  PRESSURE  ISOLATION 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  LOSS  OF 

INPUT,  MANUFACTURING  DEFECT 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT,  REMAINING  ENGINE  START  (IN 
ACCUMULATOR)  SAVED  FOR  DEORBIT.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  START  CAPABILITY  FOR 
BOTH  ENGINES.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE 
(ACCUMULATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS,  ACCUMULATOR  PROVIDES  FAIL- 
SAFE PROTECTION  FOR  UPSTREAM  FAILURES  AND  IS  CONSIDERED 
REDUNDANT.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT. 

REFERENCES;  1)  JSC  11174,11.3  2)  VS70-943099,43AD,BD  3)  JSC 

19950  4)  JSC  18958  5)  JSC  12770  6)  FLIGHT  RULES  6-5, D,  6-20 


REPORT  DATE  02/05/87 


C-201 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/lR 
3/lR 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6) 

7) 

8) 

9) 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/18/86 

OMS 

300 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


ITEM; 

FAILURE  MODE; 


VALVE-GN2  PRESSURE  ISOLATION 

FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL; 

ONORBIT; 

3/2R 

AOA; 

DEORBIT; 

3/lR 

ATO; 

LANDING/S AFING; 

3/3 

HDW/FUNC 

3/lR 

3/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS;  A [ 1 ] B [ P ] 

LOCATION; 

PART  NUMBER;  MC62 1-0009 


CAUSES;  CONTAMINATION,  PIECE-PART  STRUCTURAL 
INPUT,  MANUFACTURING  DEFECT 


FAILURE, 


LOSS  OF 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT,  REGULATOR  LOCKS  UP  AND  STOPS  FLOW. 
LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
LOSS  OF  ALL  GN2  AND  LOSS  OF  START  CAPABILITY  FOR  BOTH  ENGINES. 
ACCUMULATOR  PROVIDES  FAIL-SAFE  PROTECTION  FOR  UPSTREAM  FAILURES 
AND  IS  CONSIDERED  REDUNDANT.  CRIT  2/lR  FOR  MANUAL  TAL 
CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 


REFERENCES;  1)  JSC  11174,11.3  2)  VS70-943099,43AD,BD  3)  JSC 

19950  4)  JSC  18958  5)  JSC  12770 


REPORT  DATE  02/05/87 


C-202 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

3/lR 

3/lR 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

301 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM; 

FAILURE  MODE: 


VALVE-GN2  PRESSURE  ISOLATION 
INTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/2R 

3/2R 

3/lR 

3/3 


RTLS; 

TAL; 

AOA: 

ATO: 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS:  A [ 1 ] B [ P ] 


C [ P ] 


LOCATION; 

PART  NUMBER:  MC62 1-0009 

CAUSES;  CONTAMINATION,  SEAL  FAILURE,  PIECE-PART  STRUCTURAL 
FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  HIGH  PRESSURE 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT,  REGULATOR  LOCKS  UP  AND  STOPS  FLOW. 
LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
LOSS  OF  ALL  GN2  AND  LOSS  OF  START  CAPABILITY  FOR  BOTH  ENGINES. 
ACCUMULATOR  PROVIDES  FAIL-SAFE  PROTECTION  FOR  UPSTREAM  FAILURES 
AND  IS  CONSIDERED  REDUNDANT.  CRIT  2/lR  FOR  MANUAL  TAL 
CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 


REFERENCES:  1)  JSC  11174,11.3  2)  VS70-943099, 43AD,  BD  3)  JSC 

19950  4)  JSC  18958  5)  JSC  12770 


REPORT  DATE  02/05/87 


C-203 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/lR 
2/lR 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6) 

7) 

8) 

9) 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/18/86 

OMS 

302 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


ITEM; 

FAILURE  MODE; 


VALVE-GN2  PRESSURE  ISOLATION 
EXTERNAL  LEAKAGE 


FLIGHT  PHASE 
PRE LAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/S AFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS; 

3/2R 

TAL; 

3/2R 

AO  A; 

3/lR 

ATO; 

3/3 

REDUNDANCY  SCREENS;  A [ 1 ] 
LOCATION; 

PART  NUMBER;  MC62 1-0009 


HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


C [ P ] 


CAUSES;  HOUSING  STRUCTURAL  FAILURE,  SEAL  FAILURES  WELD  EATTTtpp 
MATERIAL  DEFECT,  HIGH  PRESSURE,  MANUFACTURING  DEFECT  ' 

EFFECTS/RATIONALE ; 

TANK,  REMAINING  ENGINE  START  (IN  ACCUMULATORS 
DEORBIT.  NO  EFFECT  ON  MISSION.  LOSS  OF  ALL  REDUNDANCY 
LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  START  CAPABILITY 
first  failure  during  RTLS  or  TAL,  ONE 
FAILURE  (ACCUMULATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  LOSS  OF  ENGINE  AND  INABILITY  TO  COMPLETE  TIME-CRITICAL  OM«? 

D^P  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL 
?^?L°lAJf CONSTRAINTS.  ACCUlJ^Tof PRO^L 
REnmimSS  1°^  UPSTREAM  FAILURES  AND  IS  CONSIDERED 

MQUiSmeNT  manual  TAL  CONTINGENCY  OMS  DUMP  PURGE 


REFERENCES;  1)  JSC  11174,11.3  2) 

19950  4)  JSC  18958  5)  JSC  12770 


VS70-943099,43AD,BD 


3)  JSC 


REPORT  DATE  02/05/87 


C-204 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

303 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  VALVE-GN2  PRESSURE  ISOLATION 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/S AFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE ; 

WITH  RESTRICTED  FLOW  IN  VALVE,  ONE  FAILURE  (SAME  FAILURE  IN  OTHER 
POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  INABILITY  TO 
REPRESSURIZE  ACCUMULATOR  AND  LOSS  OF  START  CAPABILITY  FOR  BOTH 
ENGINES.  FAILURE  UNDETECTABLE  UNTIL  ENGINE  LOST.  CRIT  1/1  FOR 
MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 


REFERENCES:  1)  JSC  11174,11.3  2)  VS70-943099, 43AD,BD  3)  JSC 

19950  4)  JSC  18958  5)  JSC  12770  6)  FLIGHT  RULES  6-5, D,  6-20 


REPORT  DATE  02/05/87 


C-205 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/07/87 

SUBSYSTEM;  OMS 
MDAC  ID;  304 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM;  VALVE-GN2  PRESSURE  ISOLATION 

FAILURE  MODE:  DELAYED  OPERATION 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ 


C [ ] 


LOCATION; 

PART  NUMBER;  MC621-0009 


CAUSES;  CONTAMINATION,  MATERIAL  DEFECT,  IMPROPER  INPUT 
EFFECTS/RATIONALE ; 

NO  EFFECT.  ACCUMULATOR  CAN  BE  REPRESSURIZED  WHEN  VALVE  OPENS. 
WORST  CASE  OF  FAILURE  MODE  IS  "FAILS  TO  OPEN”. 


REFERENCES;  1)  JSC  11174,11.3  2)  VS70-943099, 43AD,  BD  3)  JSC 

19950  4)  JSC  18958  5)  JSC  12770  6)  FLIGHT  RULES  6-5, D,  6-20 


REPORT  DATE  02/05/87 


C-206 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

305 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  GN2  PRESSURE  REGULATOR 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  REGULATOR 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF; 

3/2R 

TAL: 

2/lR 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  MC62 1-0009 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MANUFACTURING  DEFECT 

EFFECTS/RATIONALE : 

WITH  FAILURE  TO  OPEN  OF  REGULATOR,  ONE  FAILURE  (SAME  FAILURE  IN 
OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
INABILITY  TO  REPRESSURIZE  ACCUMULATORS  AND  LOSS  OF  START 
CAPABILITY  FOR  BOTH  ENGINES.  FAILURE  UNDETECTABLE  UNTIL  ENGINE 
LOST.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT. 

REFERENCES;  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099,43AD,BD 

4)  JSC  11174,11.3  5) JSC  19950  6)  JSC  12770  7)  FLIGHT  RULES  6- 

5.B,  6-20 


REPORT  DATE  02/05/87 


C-207 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

306 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

2/lR 


ITEM:  GN2  PRESSURE  REGULATOR 

FAILURE  MODE:  FAILS  TO  REGULATE  (FAILS  TO  CLOSE,  FAILS  TO 

LOCKUP,  HIGH  OUTPUT,  INTERNAL  LEAKAGE) 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  REGULATOR 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

HDW/FUNC 

3/3 

3/2R 

3/2R 

3/lR 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P 3 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 

CAUSES:  CONTAMINATION,  PIECE-PART 

MANUFACTURING  DEFECT,  HIGH  PRESSURE 

STRUCTURAL 

FAILURE, 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  LOSS  OF  GN2  PRESSURANT  THROUGH 
RELIEF  VALVE  WOULD  RESULT  IN  SAVING  OF  REMAINING  ENGINE  START  (IN 
ACCUMULATOR)  FOR  DEORBIT  BURN.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND 
POSSIBLE  RUPTURE  OF  DOWNSTREAM  LINES  OR  COMPONENTS  RESULTING  IN 
LOSS  OF  ENGINES.  WITH  FAILURE  OF  REG  DURING  RTLS  OR  TAL,  ONE 
FAILURE  (RELIEF  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  POSSIBLE  RUPTURE  OF  DOWNSTREAM  LINES  OR  COMPONENTS 
RESULTING  IN  LOSS  OF  ENGINE.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY 
OMS  DUMP  PURGE  REQUIREMENT. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099, 43AD,BD 

4)  JSC  11174,11.3  5)  JSC  19950  6)  JSC  12770  7)  FLIGHT  RULE  6- 

20 


REPORT  DATE  02/05/87 


C-208 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

307 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


ITEM:  GN2  PRESSURE  REGULATOR 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  REGULATOR 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 

CAUSES:  HOUSING  STRUCTURAL  FAILURE,  SEAL  FAILURES,  WELD  FAILURE, 

MATERIAL  DEFECT,  HIGH  PRESSURE,  MANUFACTURING  DEFECT 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  REMAINING  ENGINE  START  (IN 
ACCUMULATOR)  SAVED  FOR  DEORBIT.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  START  CAPABILITY  FOR 
BOTH  ENGINES.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE 
(ACCUMULATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
OF  ONE  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL 
OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL 
AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS.  ACCUMULATOR  PROVIDES 
FAIL-SAFE  PROTECTION  FOR  UPSTREAM  FAILURES  AND  IS  CONSIDERED 
REDUNDANT.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099 , 43AD, BD 

4)  JSC  11174,11.3  5)  FLIGHT  RULE  6-20 


REPORT  DATE  02/05/87 


C-209 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


12/18/86 

OMS 

308 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

2/lR 


ITEM;  GN2  PRESSURE  REGULATOR 

FAILURE  MODE:  FAILS  OUT  OF  TOLERANCE,  REGULATES  AT  LOW  PRESSURE 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  REGULATOR 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 

REDUNDANCY  SCREENS; 


CRITICALITIES 

HDW/FUNC  ABORT  HDW/FUNC 


3/3 

3/2R 

2/2 

2/lR 

3/3 

A [ 1 ] B [ 


RTLS; 

2/lR 

TAL; 

2/lR 

AOA: 

3/3 

ATO; 

2/lR 

] 

C [ P ] 

LOCATION; 

PART  NUMBER;  MC62 1-0009 


CAUSES;  MANUFACTURING  DEFECT 
EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF  ENGINE 
RESTART  CAPABILITY.  WITH  LOSS  OF  ONE  ENGINE  DUE  TO  FAILURE  OF 
REGULATOR,  ONE  FAILURE  (SAME  FAILURE  IN  OTHER  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES. 
SUBSEQUENT  REGULATOR  OUTPUT  PRESSURE  INSUFFICIENT  TO  SUPPORT 
ENGINE  USAGE.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099, 43AD,BD 

4)  JSC  11174,11.3  5)JSC  19950  6)  JSC  12770 


REPORT  DATE  02/05/87 


C-210 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

309 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT;  2/lR 


ITEM:  GN2  PRESSURE  REGULATOR 

FAILURE  MODE;  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  REGULATOR 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 

3/3 


3/2R 

2/2 

2/lR 

3/3 


RTLS: 

TAL: 

AOA: 

ATO; 


REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


HDW/FUNC 

2/lR 

2/lR 

3/3 

2/lR 


C [ P ] 


PART  NUMBER:  MC62 1-0009 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 


EFFECTS/RATIONALE ; 

WITH  RESTRICTED  FLOW  IN  REGULATOR,  ONE  FAILURE  (SAME  FAILURE  IN 
OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
INABILITY  TO  REPRESSURIZE  ACCUMULATORS  AND  LOSS  OF  START 
CAPABILITY  FOR  BOTH  ENGINES.  FAILURE  UNDETECTABLE  UNTIL  ENGINE 
LOST.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099,43AD,BD 

4)  JSC  11174,11.3  4)  FLIGHT  RULES  6-5, B,  6-20 


REPORT  DATE  02/05/87 


C-211 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

310 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


HDW/FUNC 
3/lR 
2/lR 

GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 
STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 
o) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/2R 

3/2R 

3/lR 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 

A [ 2 ] 

B [ P ] 

c [ P ] 

LOCATION: 
PART  NUMBER: 


MC621-0009 


failoee,  mechanical  shock,  weld 
HIGH  PRESSU^  failures,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT, 

EFFECTS/RATIONALE : 

REG  TEST  PORT  LINE.  FIRST  FAILURE  IS  NO  EFFECT  Tncc  m?  rtt 

POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE*  TO  LOSS  OF  ALL 
GN2  PRESSURANTS  AND  LOSS  OF  START  CAPABILITY  FOR  BOTH  PHCTM-rq 

rail'^Vi°FOR°MAS^f?'’^J?‘  IS  CONSIDERED  REDUND^. 

CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 

REFERENCES^OiI).”A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 


REPORT  DATE  02/05/87 


C-212 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID; 


12/30/86 

OMS 

311 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM:  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER;  MC62 1-0009 

CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE : 

REG  TEST  PORT  LINE.  NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-213 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID; 


12/19/86 

OMS 

312 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  COUPLING,  GN2  REGULATOR  TEST  PORT 

FAILURE  MODE;  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  REGULATOR  TEST  PORT  COUPLING 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/lR 

3/2R 

TAL: 

3/lR 

3/2R 

AO  A: 

3/3 

3/lR 

ATO; 

3/lR 

3/3 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER;  ME276-0032-0009 


CAUSES:  SEAL  FAILURES,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  MATERIAL  DEFECT,  PROCEDURAL  ERROR,  MISHANDLING,  HIGH 
PRESSURE 


EFFECTS/RATIONALE ; 

FAILURE  OF  FIRST  SEAL  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ALL  GN2  PRESSURANT 
AND  LOSS  OF  BOTH  ENGINGES.  ACCUMULATOR  PROVIDES  FAIL-SAFE 
PROTECTION  FOR  UPSTREAM  FAILURES  AND  IS  CONSIDERED  REDUNDANT. 


REFERENCES:  1)  VS70-431099,SH3  2)  ME276-0032  3)  JSC  11174,11.3 

4)  VS70-943099,43AD,BD 


REPORT  DATE  02/05/87 


C-214 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/19/86 

OMS 

313 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  /NA 


ITEM;  COUPLING,  GN2  REGULATOR  TEST  PORT 

FAILURE  MODE;  FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  REGULATOR  TEST  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

/NA 

LIFTOFF; 

/NA 

TAL; 

/NA 

ONORBIT; 

/NA 

AO  A: 

/NA 

DEORBIT; 

/NA 

ATO: 

/NA 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER;  ME276-0032-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  VS70-431099,SH3  2)  ME276-0032  3)  JSC  11174,11.3 

4)  VS70-943099,43AD,BD 


REPORT  DATE  02/05/87 


C-215 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

314 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING,  GN2  REGULATOR  TEST  PORT 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  OPEN,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  REGULATOR  TEST  PORT  COUPLING 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF; 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AOA: 

/NA 

DEORBIT: 
LANDING/ SAFING: 

/NA 

3/3 

ATO: 

/NA 

REDUNDANCY  SCREENS; 

A C ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  ME276-0032-0009 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION,  PIECE-PART  STRUCTURAL 

FAILURE,  PROCEDURAL  ERROR 


EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  VS70-431099,SH3  2)  ME276-0032  3)  JSC  11174,11.3 

4)  VS70-943099,43AD,BD 


REPORT  DATE  02/05/87 


C-216 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/18/86 

OMS 

315 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT:  2/lR 


ITEM:  VALVE -GN2  PRESSURE  RELIEF 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  RELIEVE  PRESSURE, 

RESTRICTED  FLOW 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  RELIEF  VALVE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH; 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL; 

2/lR 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/lR 

ATO; 

3/lR 

LANDING/ SAFING; 
REDUNDANCY  SCREENS: 

3/3 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  MC62 1-0009 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 

MANUFACTURING  DEFECT,  BINDING 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  REGULATOR  MUST  FAIL  HIGH  FOR  RELIEF 
VALVE  FAILURE  EFFECTS  TO  BE  MANIFESTED.  LOSS  OF  ALL  REDUNDANCY 
IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES. 
OVERPRESSURIZATION  OF  SUBSYSTEM  COULD  RESULT  IN  POSSIBLE  RUPTURE 
OF  LINES  CAUSING  LOSS  OF  GN2  PRESSURANT  AND  LOSS  OF  ENGINE  START 
CAPABILITY.  WITH  FAILURE  OF  RELIEF  VALVE  DURING  RTLS  OR  TAL,  ONE 
FAILURE  (REGULATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  POSSIBLE  RUPTURE  OF  GN2  LINES,  LOSS  OF  ENGINE  START 
CAPABILITY,  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP. 

REFERENCES;  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099,43AD,BD 

4)  JSC  11174,11.3  5)  JSC  19950 


REPORT  DATE  02/05/87 


C-217 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/18/86 

OMS 

316 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


ITEM;  VALVE-GN2  PRESSURE  RELIEF 

FAILURE  MODE;  FAILS  TO  CLOSE,  FAILS  TO  RESEAT  (AFTER  REG 
FAILURE),  FAILS  TO  REMAIN  CLOSED 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 


1) 

HARDWARE  COMPONENTS 

2) 

ASSEMBLIES 

3) 

OME  SUBSYSTEM 

4) 

GN2  ASSEMBLY 

5) 

GN2  PRESSURE  RELIEF  VALVE 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL; 

ONORBIT; 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO: 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS:  A [ 1 ] 

LOCATION: 

PART  NUMBER:  MC621-0009 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/lR 


C [ P ] 


CAUSES;  CONTAMINATION,  PIECE-PART 
MANUFACTURING  DEFECT,  BINDING 


STRUCTURAL  FAILURE, 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  REGULATOR  MUST  FAIL  FOR  EFFECTS  OF 
FAILED  OPEN  RELIEF  VALVE  TO  BE  MANIFESTED.  REMAINING  START  (IN 
ACCUMULATOR)  SAVED  FOR  DEORBIT  BURN.  LOSS  OF  ALL  REDUNANCY 
IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  GN2  PRESSURANT  IN 
TANKS  AND  ACCUMULATORS,  AND  LOSS  OF  START  CAPABILITY  FOR  BOTH 
ENGINES.  ACCUMULATOR  PROVIDES  FAIL-SAFE  PROTECTION  FOR  UPSTREAM 
failures  and  is  considered  redundant.  CRIT  2/lR  FOR  MANUAL  TAL 
CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 


REFERENCES;  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099, 43AD,BD 

4)  JSC  11174,11.3  5)  JSC  19950  6)  FLIGHT  RULES  6-4, B,  6-20 


REPORT  DATE  02/05/87 


C-218 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

317 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


ITEM:  VALVE-GN2  PRESSURE  RELIEF 

FAILURE  MODE:  INTERNAL/EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  RELIEF  VALVE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P 3 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  SEAL  FAILURES,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING  DEFECT,  HIGH  PRESSURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  REMAINING  ENGINE  START  (IN 
ACCUMULATOR)  SAVED  FOR  DEORBIT  BURN.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS  OF  GN2  PRESSURANT  IN 
TANKS  AND  ACCUMULATORS  AND  LOSS  OF  START  CAPABILITY  FOR  BOTH 
ENGINES.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE 
(ACCUMULATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT.  ACCUMULATOR  PROVIDES  FAIL-SAFE  PROTECTION  FOR 
UPSTREAM  FAILURES  AND  IS  CONSIDERED  REDUNDANT. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099 , 43AD,  BD 

4)  JSC  11174,11.3  5)  JSC  19950  6)  FLIGHT  RULES  6-4, B,  6-20 


REPORT  DATE  02/05/87 


C-219 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/18/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/lR 

MDAC  ID: 

318 

ABORT: 

2/lR 

ITEM: 

VALVE-GN2 

PRESSURE  RELIEF 

FAILURE  MODE 

: FAILS  OUT 

OF  TOLERANCE,  OPENS 

AT  LOW  PRESSURE 

LEAD  ANALYST 

: C.D.  PRUST 

SUBSYS  LEAD: 

D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  RELIEF  VALVE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 
LANDING/S AFING: 

3/lR 

3/3 

ATO: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P 3 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  MANUFACTURING  DEFECT,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  REMAINING  ENGINE  START  (IN 
ACCUMULATOR)  SAVED  FOR  DEORBIT  BtJRN.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  GN2  PRESSURANT  IN 
TANKS  AND  ACCUMULATORS  AND  LOSS  OF  START  CAPABILITY  FOR  BOTH 
ENGINES.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE 
(ACCUMULATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT.  ACCUMULATOR  PROVIDES  FAIL-SAFE  PROTECTION  FOR 
UPSTREAM  FAILURES  AND  IS  CONSIDERED  REDUNDANT. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099, 43AD,  BD 

4)  JSC  11174,11.3  5)  JSC  19950  6)  FLIGHT  RULES  6-4, B,  6-20 


REPORT  DATE  02/05/87 


C-220 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

319 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  CHECK  VALVE-GN2 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  CHECK  VALVE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING  DEFECT,  BINDING 


EFFECTS/RATIONALE:  ^ 

WITH  FAILURE  TO  OPEN  OF  CHECK  VALVE,  ONE  FAILURE  (SAME  FAILURE  IN 
OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
BOTH  ENGINES.  INABILITY  TO  REPRESSURIZE  ACCUMULATOR  RESULTS 
IN  LOSS  OF  ENGINE.  FAILURE  NOT  DETECTABLE  UNTIL  ENGINE  LOST. 

CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3) 

4)  JSC  11174,11.3  5)  JSC  12770  6)  JSC  19950 

5,C,  6-20 


VS70-943099-43AD,BD 
7)  FLIGHT  RULES  6- 


REPORT  DATE  02/05/87 


C-221 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/lR 
2/lR 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  CHECK  VALVE 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID; 


1/07/87 

OMS 

320 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


ITEM;  CHECK  VALVE-GN2 

FAILURE  MODE;  FAILS  TO  CLOSE,  VALVE  FAILS  TO  RESEAT 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS; 

3/2R 

TAL; 

3/2R 

AOA: 

3/lR 

ATO; 

3/3 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS;  A [ 2 ] 
LOCATION; 

PART  NUMBER;  MC62 1-0009 


nwSSSm*  „J?NTAMINATI0N,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 
DEFECT,  MANUFACTURING  DEFECT,  BINDING 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  ACCUMULATOR  FAIL-SAFE  PROTECTTOM 
AGAINST  LEAK  UPSTREAM  OP  CHECK  VALVE.  WITH  cSSk  VAlIe  ?mlS 
SUBSEQUENT  SINGLE  LEAK  RESULTS  IN  LOSS  OF  AFFECTED 

not  detectable  until  subsequent  failure  occurs 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
MSS  OF  BOTH  ENGINES.  WITH  FIRST  FAILURi  DURING  ^“r  ?L 
nnw  LEAK)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 

ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME- 
OWTICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009 

11174,11.3  5)  JSC  12770  6)  JSC  19950 


3)  VS70-943099 


4)  JSC 


REPORT  DATE  02/05/87 


C-222 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/07/87 

SUBSYSTEM:  OMS 

MDAC  ID:  321 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


ITEM:  CHECK  VALVE-GN2 

FAILURE  MODE:  INTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  CHECK  VALVE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT; 

3/2R 

AO  A: 

3/3 

DEORBIT; 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  CONTAMINATION,  SEAL  FAILURE,  MATERIAL  DEFECT, 

MANUFACTURING  DEFECT,  HIGH  PRESSURE 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  ACCUMULATOR  FAIL-SAFE  PROTECTION 
AGAINST  LEAK  UPSTREAM  OF  CHECK  VALVE.  WITH  CHECK  VALVE  FAILED 
OPEN,  A SUBSEQUENT  SINGLE  LEAK  RESULTS  IN  LOSS  OF  AFFECTED 
ENGINE.  FAILURE  NOT  DETECTABLE  UNTIL  SUBSEQUENT  FAILURE  OCCURS. 
LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO 
LOSS  OF  BOTH  ENGINES.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL, 

ONE  FAILURE,  (GN2  LEAK)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME- 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099  4)  JSC 

11174,11.3  5)  JSC  12770  6)  JSC  19950 


REPORT  DATE  02/05/87 


C-223 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/18/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT; 

1/1 

MDAC  ID: 

322 

ABORT: 

1/1 

ITEM: 

GN2  ACCUMULATOR 

FAILURE  MODE 

; RUPTURE 

LEAD  ANALYST 

: C.D.  PRUST 

SUBSYS  LEAD; 

D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ACCUMULATOR 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 


PRE LAUNCH: 

1/1 

RTLS; 

1/1 

LIFTOFF; 

1/1 

TAL; 

1/1 

ONORBIT; 

1/1 

AOA: 

1/1 

DEORBIT; 

1/1 

ATO; 

1/1 

LANDING/ SAFING: 

1/1 

REDUNDANCY  SCREENS:  A 

C ] 

B [ 

] 

c [ ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  WELD  FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING  DEFECT,  HIGH  PRESSURE,  HIGH  TEMPERATURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  POTENTIAL 
SHRAPNEL  DAMAGE  TO  SURROUNDING  COMPONENTS,  AND  VEHICLE  STRUCTURE, 
FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099,43AD,BD 

4)  JSC  11174,11.3  5)  JSC  12770  6)  JSC  19950 


REPORT  DATE  02/05/87 


C-224 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

323 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  GN2  ACCUMULATOR 

FAILURE  MODE:  STRUCTURAL  FAILURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ACCUMULATOR 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/2R 

TAL; 

1/1 

ONORBIT: 

2/2 

AO  A: 

3/3 

DEORBIT: 

2/lR 

ATO; 

2/lR 

LANDING/SAFING: 
REDUNDANCY  SCREENS; 

3/3 

A [ 2 ] 

B [ P ] 

c [ p 3 

LOCATION; 

PART  NUMBER;  MC62 1-0009 

CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  WELD  FAILURE,  MATERIAL 
DEFECT,  MANUFACTURING  DEFECT,  HIGH  PRESSURE,  HIGH  TEMPERATURE, 
SEAL  FAILURES 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  AFFECTED  ENGINE.  WITH  FIRST 
FAILURE,  ONE  FAILURE  (ACCUMULATOR  IN  OTHER  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES. 

FIRST  FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME- 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099, 43AD,  BD 

4)  JSC  11174,11.3  5)  JSC  12770  6)  JSC  19950 


REPORT  DATE  02/05/87 


C-225 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

324 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

1/1 


^TEM:  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

FAILURE  MODE;  STRUCTURAL  FAILURE,  RUPTURE,  EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRE LAUNCH; 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT; 

2/2 

AOA: 

DEORBIT: 

2/lR 

ATO; 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 3 

B [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 

HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE, 

FAILURE,  SEAL  FAILURES,  MATERIAL  DEFECT, 
HIGH  PRESSURE 


MECHANICAL  SHOCK,  WELD 
MANUFACTURING  DEFECT, 


EFFECTS/RATIONALE ; 

CHECK  VALVE  TO  ENG  CONTROL  VALVES  AND  PURGE  VALVE  ASSY.  FIRST 
FAILURE  RESULTS  IN  LOSS  OF  AFFECTED  ENGINE.  WITH  FIRST  FAILURE 
ONE  FAULIRE  (SAME  FAILURE  IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS 
OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST  FAILURE 
DURING  RTLS  OR  TAL  RESULTS  IN  LOSS  OF  ENGINE  AND  INABILITY  TO 
COMPLETE  TIME-CRITICAL  OMS  DUMP  LEADING  TO  POSSIBLE  VIOLATIONS 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-226 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

325 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

1/1 


ITEM:  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 

CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE ; 

ACCUMULATOR  TO  ENG  CONTROL  VALVES.  FIRST  FAILURE  RESULTS  IN  LOSS 
OF  AFFECTED  ENGINE.  WITH  FIRST  FAILURE,  ONE  FAILURE  (SAME 
FAILURE  IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  LOSS  OF  BOTH  ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE 
INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-227 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

326 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM;  VALVE -ENGINE  CONTROL 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  REMAIN  OPEN 


HDW/FUNC 

2/lR 

1/1 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/S AFING; 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

1/1 

3/2R 

TAL: 

1/1 

2/2 

AO  A: 

3/3 

2/lR 

3/3 

ATO; 

2/lR 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER;  MC621-0009 


EFFECTS/RATIONALE : 

RESULTS  IN  LOSS  OF  AFFECTED  ENGINE.  WITH  FIRST 
FAILURE,  ONE  FAILURE  (CONTROL  VALVE  IN  OTHER  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DOE  TO  LOSS  OF  S ENGINES  FIRST 
raiLORE  DURING  RTLS  OR  TAL  IS  POSSIBLE  Llsro^FE/VEMcLE  Dm 

POSSIBLE  INABIITY  TO  COMPLETE  TIME-CRITICAL 

dump  resulting  in  possible  violations  of  prop  tank  structural 

AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS, 


REFERENCES; 
4)  1181700 


1)  JSC  18958  2) 

5)  JSC  11174,11.3 


MC621-0009  2)  VS70-943099, 43AD, BD 

6)  JSC  12770  7)  JSC  19950 


REPORT  DATE  02/05/87 


C-228 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

327 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  VALVE -ENGINE  CONTROL 

FAILURE  MODE:  FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

HARDWARE  COMPONENTS 

2) 

ASSEMBLIES 

3) 

OME 

SUBSYSTEM 

4) 

GN2 

ASSEMBLY 

5) 

GN2 

ENG  CNTRL  1/2  VLV 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AO  A: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  LOSS  OF 

INPUT,  MANUFACTURING  DEFECT 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  SAVING  OF  AFFECTED  ENGINE  FOR  DEORBIT. 
WITH  FAILURE  TO  CLOSE  OF  ONE  ENGINE  CONTROL  VALVE,  ONE  FAILURE 
(FAILURE  TO  CLOSE  OF  REDUNDANT  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE.  CLOSE  TANK  ISOL  VALVES  TO  SHUTDOWN  ENGINE. 
ATTEMPTING  TO  RESTART  ENGINE  WITH  PROP  TANK  ISOLATION  VALVES 
COULD  RESULT  IN  DAMAGE  TO  AND  LOSS  OF  ENGINE  AND  INABILITY  TO 
USE/DEPLETE  PORP  IN  AFFECTED  POD.  ANY  USE  OF  PROP  IN  AFFECTED 
POD  INITIATES  FLOW  THROUGH  AFFECTED  ENGINE.  POSSIBLE  HAZARD  TO 
GROUND  CREW. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  2)  VS70-943099,43AD,BD 

4)  1181700  5)  JSC  11174,11.3  6)  FLIGHT  RULE  6-26 


REPORT  DATE  02/05/87 


C-229 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

328 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  VALVE-ENGINE  CONTROL 

FAILURE  MODE:  INTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

2/lR 

3/3 

ATO: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  SEAL  FAILURE,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT, 

HIGH  PRESSURE 


EFFECTS/RATIONALE : 

FIRST  FAILURE  (WITH  VALVE  IN  EITHER  OPENED  OR  CLOSED  POSITION) 
RESULTS  IN  LOSS  OF  GN2  PRESSURANT  THROUGH  VENT  PORT  AND  POSSIBLE 
INABILITY  TO  MAINTAIN  ACTUATOR  OPEN  POSITION  RESULTING  IN  LOSS  OF 
AFFECTED  ENGINE.  WITH  FIRST  FAILURE,  ONE  FAILURE  (SAME  FAILURE 
IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
OF  BOTH  ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  RESULTS  IN 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 

ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  2)  VS70-943099 , 43AD,  BD 

4)  1181700  5)  JSC  11174,11.3  6)  JSC  12770  7)  JSC  19950 


REPORT  DATE  02/05/87 


C-230 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

329 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  VALVE-ENGINE  CONTROL 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 


CAUSES:  HOUSING  STRUCTURAL  FAILURE,  SEAL  FAILURES,  WELD  FAILURE, 

MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  HIGH  PRESSURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  GN2  PRESStJRANT  AND  INABILITY  TO 
MAINTAIN  ACTUATOR  OPEN  POSITION  RESULTING  IN  LOSS  OF  AFFECTED 
ENGINE.  WITH  FIRST  FAILURE,  ONE  FAILURE  (SAME  FAILURE  IN  OTHER 
POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH 
ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  RESULTS  IN  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND 

POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING 
IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  2)  VS70-943099, 43AD, BD 

4)  1181700  5)  JSC  11174,11.3 


REPORT  DATE  02/05/87  C-231 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

330 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  VALVE-ENGINE  CONTROL 

FAILURE  MODE:  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

2/2 

AOA: 

DEORBIT: 

2/lR 

ATO: 

LANDING/S AFING: 

3/3 

HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 


LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  FILTER  BLOCKAGE,  CONTAMINATION 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  AFFECTED  ENGINE.  WITH  FIRST 
FAILURE,  ONE  FAILURE  (CONTROL  VALVE  IN  OTHER  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST 
FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME- 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  2)  VS70-943099 , 43AD,  BD 

4)  1181700  5)  JSC  11174,11.3  6)  JSC  12770  7)  JSC  19950 


REPORT  DATE  02/05/87 


C-232 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/18/86 

OMS 

331 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  1/1 


ITEM:  VALVE-ENGINE  CONTROL 

FAILURE  MODE;  DELAYED  OPERATION 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH; 

3/3 

RTLS: 

1/1 

LIFTOFF; 

3/2R 

TAL; 

1/1 

ONORBIT: 

2/2 

AO  A: 

3/3 

DEORBIT; 

2/lR 

ATO: 

2/lR 

LANDING/S AFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER;  MC62 1-0009 

CAUSES;  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 
MANUFACTURING  DEFECT,  IMPROPER  INPUT 

EFFECTS /RATIONALE ; 

FIRST  FAILURE  MAY  CAUSE  LOW  INITIAL  FUEL  AND  OXID  FLOW  RATES  TO 
ENGINE  RESULTING  IN  POSSIBLE  DAMAGE  TO  AND  LOSS  OF  ENGINE.  WITH 
FIRST  FAILURE,  ONE  FAILURE  (VALVE  IN  REDUNDANT  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST 
FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME- 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES;  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099 , 43AD,  BD 

4)  1181700  5)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-233 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

332 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


ITEM; 

FAILURE  MODE: 


ORIFICE-ENGINE  CONTROL  VALVE  INLET 
RESTRICTED  FLOW 


HDW/FUNC 

2/lR 

1/1 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  VLV  INLET  ORIFICE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/ SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

2/2 

AOA: 

2/lR 

ATO: 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] 
LOCATION: 

PART  NUMBER:  MC62 1-0009 


HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


C [ P ] 


CAUSES:  CONTAMINATION 


EFFECTS/RATIONALE ; 

^^'^^ICTED  FLOW  INTO  ONE  ENGINE  CONTROL  VALVE  AND  RESULTING 
WSS  OT  AFFECTED  ENGINE,  ONE  FAILDRE  (LOSS  OF  VALVE  IN  OTHER  PODl 
AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  START 
CAPABILITY  FOR  BOTH  ENGINES.  FIRST  FAILURE  DTOING^TLS  OR  TAL  IS 
MSSIB^  LOSS  OF  LIFE/VEHICLE  DOE  TO  LOSS  OF  SgIHE  MD  TOSOTBL^ 
DncoTDT^^rT^  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN 
«OTER“Er?“sTMIN?L structural  AND  ORBITER  MASS 


REFERENCES:  1)  MC621— 0009  2)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-234 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
2/lR 
2/lR 


AMBIENT. 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  VLV  VENT  ORIFICE 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

333 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  ORIFICE-ENGINE  CONTROL  VALVE  VENT 

FAILURE  MODE:  RESTRICTED  FLOW,  INABILITY  TO  VENT  GN2  TO 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AO  A: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 


CAUSES:  CONTAMINATION 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  POSSIBLE  INABILITY  TO  CLOSE  BI-PROP 
VALVES.  WITH  FIRST  FAILURE,  ONE  FAILURE  (ENGINE  CONTROL  VALVE  IN 
SAME  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
INABILITY  TO  CLOSE  ALL  BI-PROP  VALVES  IN  AFFECTED  POD.  CLOSE 
TANK  ISOL  VALVES  TO  SHUTDOWN  ENGINES.  ATTEMPTING  TO  RESTART 
ENGINES  WITH  PROP  TANK  ISOL  VALVES  COULD  RESULT  IN  DAMAGE  TO  AND 
LOSS  OF  ENGINE  AND  INABILITY  TO  USE/DEPLETE  PROP  IN  AFFECTED 
POD.  ANY  USE  OF  PROP  IN  AFFECTED  POD  INITIATES  FLOW  THROUGH 
ENGINE.  POSSIBLE  HAZARD  TO  GROUND  CREW. 

REFERENCES:  1)  MC621-0009  2)  JSC  11174,11.3 


REPORT  DATE  02/05/87 


C-235 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

334 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  CHECK  VALVE -ENGINE  CONTROL  VALVE  VENT 

FAILURE  MODE:  FAILS  TO  OPEN 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  VLV  VENT  CHECK  VALVE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 

CAUSES:  CONTAMINATION,  PIECE-PART 

STRUCTURAL 

FAILURE, 

MANUFACTURING  DEFECT, 

BINDING 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  POSSIBLE  INABILITY  TO  CLOSE  BI-PROP 
VALVES.  WITH  FIRST  FAILURE,  ONE  FAILURE  (ENGINE  CONTROL  VALVE  IN 
SAME  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
INABILITY  TO  CLOSE  ALL  BI-PROP  VALVES  IN  AFFECTED  POD.  CLOSE 
TANK  ISOL  VALVES  TO  SHUTDOWN  ENGINES.  ATTEMPTING  TO  RESTART 
ENGINES  WITH  PROP  TANK  ISOL  VALVES  COULD  RESULT  IN  DAMAGE  TO  AND 
LOSS  OF  ENGINE  AND  INABILITY  TO  USE/DEPLETE  PROP  IN  AFFECTED 
POD.  ANY  USE  OF  PROP  IN  AFFECTED  POD  INITIATES  FLOW  THROUGH 
ENGINE.  POSSIBLE  HAZARD  TO  GROUND  CREW. 


REFERENCES:  1)  MC621-0009  2)  JSC  11174,11.3  3)  JSC  12770 


REPORT  DATE  02/05/87 


C-236 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


1/07/87 

OMS 

335 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  1/1 


ITEM; 

FAILURE  MODE; 


CHECK  VALVE -ENGINE  CONTROL  VALVE  VENT 
FAILS  TO  CLOSE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  VLV  VENT  CHECK  VALVE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF; 

3/2R 

TAL; 

1/1 

ONORBIT; 

2/2 

AOA: 

3/3 

DEORBIT; 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 

CAUSES;  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE, 
MANUFACTURING  DEFECT,  BINDING 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  MAY  ALLOW  CONTAMINATION  TO  MIGRATE  INTO  VALVE  AND 
ACTUATOR  RESULTING  IN  POSSIBLE  LOSS  OF  FUNCTION  AND  LOSS  OF 
AFFECTED  ENGINE.  WITH  FIRST  FAILURE,  ONE  FAILURE  (SAME  FAILURE 
IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS 
OF  BOTH  ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY 
TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS . 

REFERENCES;  1)  MC621-0009  2)  JSC  11174,11.3  3)  JSC  12770 


REPORT  DATE  02/05/87 


C-237 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/07/87 

SUBSYSTEM;  OMS 
MDAC  ID;  336 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  1/1 


ITEM;  CHECK  VALVE-ENGINE  CONTROL  VALVE  VENT 

FAILURE  MODE;  INTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  VLV  VENT  CHECK  VALVE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

1/1 

LIFTOFF; 

3/2R 

TAL; 

1/1 

ONORBIT; 

2/2 

AOA; 

3/3 

DEORBIT; 
LANDING/ SAFING; 

2/lR 

3/3 

ATO; 

2/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION; 

PART  NUMBER;  MC62 1-0009 


CAUSES;  CONTAMINATION,  SEAL  FAILURE,  MATERIAL  DEFECT, 
MANUFACTURING  DEFECT,  HIGH  PRESSURE 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  MAY  ALLOW  CONTAMINATION  TO  MIGRATE  INTO  VALVE  AND 
ACTUATOR  RESULTING  IN  POSSIBLE  LOSS  OF  FUNCTION  AND  LOSS  OF 
AFFECTED  ENGINE.  WITH  FIRST  FAILURE,  ONE  FAILURE  (SAME  FAILURE 
IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS 
OF  BOTH  ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY 
TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE 
VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES;  1)  MC621-0009  2)  JSC  11174,11.3  3)  JSC  12770 


REPORT  DATE  02/05/87 


C-238 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

337 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  PNEUMATIC  ACTUATOR 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  OPERATE,  PHYSICAL 

BINDING/JAMMING 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PNEUMATIC  ACTUATOR 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  1181710 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING  DEFECT 

EFFECTS/RATIONALE : 

WITH  FAILURE  TO  OPERATE  OF  ONE  ACTUATOR  AND  RESULTING  LOSS  OF 
AFFECTED  ENGINE,  ONE  FAILURE  (FAILURE  TO  OPERATE  OF  ACTUATOR  IN 
OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
BOTH  ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS 
OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO 
COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099, 43AD,  BD 

4)  1181710  5)  JSC  11174,11.3  6)  JSC  12770 


REPORT  DATE  02/05/87 


C-239 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/19/86 

OMS 

338 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM;  PNEUMATIC  ACTUATOR 

FAILURE  MODE:  FAILS  TO  CLOSE,  PHYSICAL  BINDING/ JAMMING 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PNEUMATIC  ACTUATOR 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/ SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


2/lR 

3/2R 

3/2R 

2/lR 

2/lR 


RTLS; 

TAL: 

AOA; 

ATO; 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


LOCATION: 

PART  NUMBER;  1181710 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


c [ p 3 


CAUSES;  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 
DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  SAVING  OF  ENGINE  FOR  DEORBIT  BURN.  WITH 
FAILURE  TO  CLOSE  OF  ONE  ACTUATOR,  ONE  FAILURE  (FAILURE  TO  CLOSE 
OF  REDUNDANT  ACTUATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  INABILITY  TO  CLOSE  ALL  BI-PROP  VALVES  IN  AFFECTED  POD. 
CLOSE  TANK  ISOL  VALVES  TO  SHUT  DOWN  ENGINE.  ATTEMPTING  TO 
RESTART  ENGINE  WITH  TANK  ISOL  VALVES  COULD  RESULT  IN  DAMAGE  TO 
AND  LOSS  OF  ENGINE  AND  INABILITY  TO  USE/DEPLETE  PROP  IN 
AFFECTED  POD.  ANY  USE  OF  PROP  IN  AFFECTED  POD  INITIATES  FLOW 
THROUGH  ENGINE.  POSSIBLE  HAZARD  TO  GROUND  CREW. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943 099, 43AD,  BD 

4)  1131710  5)  JSC  11174,11.3  6)  JSC  12770  1)  FLIGHT  RULES  6-26 


REPORT  DATE  02/05/87 


C-240 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

339 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

1/1 


ITEM:  PNEUMATIC  ACTUATOR 

FAILURE  MODE:  FAILS  MIDTRAVEL,  PARTIALLY  OPEN/CLOSED,  PHYSICAL 

BINDING/JAMMING 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PNEUMATIC  ACTUATOR 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

2/lR 

RTLS: 

1/1 

LIFTOFF: 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

2/lR 
A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 

DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

WITH  FAILURE  TO  OPERATE  OF  ONE  ACTUATOR  AND  RESULTING  LOSS  OF 
AFFECTED  ENGINE,  ONE  FAILURE  (FAILURE  TO  OPERATE  OF  ACTUATOR  IN 
OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
BOTH  ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO 
COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099 , 43AD,  BD 

4)  1181710  5)  JSC  11174,11.3  6)  JSC  12770  7)  FLIGHT  RULES  6- 

26,  6-3, H 


REPORT  DATE  02/05/87 


C-241 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

340 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT;  2/lR 


ITEM;  PNEUMATIC  ACTUATOR 

FAILURE  MODE;  INTERNAL  LEAKAGE,  PISTON  SEAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PNEUMATIC  ACTUATOR 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRE LAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/2R 

3/2R 

3/lR 

3/3 

ABORT 

RTLS: 

TAL; 

AOA: 

ATO: 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION; 

PART  NUMBER;  MC621-0009 


CAUSES:  SEAL  FAILURES,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT 

HIGH  PRESSURE  ' 


EFFECTS/RATIONALE ; 

FAILURE  OF  FIRST  PISTON  SEAL  IS  NO  EFFECT.  LOSS  OF  ALL 
REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH 
ENGINES.  LEAKAGE  OF  GN2  AROUND  PISTON  INTO  ACTUATOR  CAVITY  WILL 
RESULT  IN  CLOSING  OF  BI-PROP  VALVES  WHEN  GN2  PRESSURE  IN  CAVITY 
PLUS  SPRING  FORCE  OVERCOME  PISTON  FACE  GN2  PRESSURE.  WITH 
FAILURE  OF  FIRST  SEAL  DURING  RTLS  OR  TAL,  ONE  FAILURE  (REDUNDANT 
SEAL)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS  OF 
ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099,43AD,BD 

4)  1181710  5)  JSC  11174,11.3  6)  JSC  12770  7)  FLIGHT  RULE  6-26 


REPORT  DATE  02/05/87 


C-242 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

341 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  PNEUMATIC  ACTUATOR 

FAILURE  MODE:  RUPTURE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PNEUMATIC  ACTUATOR 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  1/1  RTLS: 

LIFTOFF:  1/1  TAL: 

ONORBIT:  1/1  AOA: 

DEORBIT:  1/1  ATO: 

LANDING/ SAFING:  1/1 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  HIGH  PRESSURE,  MATERIAL 

DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  POSSIBLE 
SHRAPNEL  DAMAGE  TO  SURROUNDING  POD  COMPONENTS  AND  VEHICLE 
STRUCTURE,  AND  FIRE/EXPLOSION  HAZARD. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099,43AD,BD 

4)  1181710  5)  JSC  11174,11.3  6)  JSC  12770 


REPORT  DATE  02/05/87 


C-243 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 

SUBSYSTEM:  OMS 

MDAC  ID:  342 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  PNEUMATIC  ACTUATOR 

FAILURE  MODE:  INTERNAL/ EXTERNAL  LEAKAGE  (PROPELLANT) 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PNEUMATIC  ACTUATOR 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/lR 

TAL: 

3/lR 

ONORBIT: 

3/lR 

AOA: 

3/lR 

DEORBIT: 
LANDING/S AFING: 

3/lR 

3/lR 

ATO: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [NA  ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  SEAL  FAILURE,  HIGH  PRESSURE,  MATERIAL  DEFECT, 

MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  SEALS  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
AND  LEAKAGE  OF  PROP  RESULTING  IN  FIRE/EXPLOSION  HAZARD  AND  HAZARD 
TO  GROUND  CREW.  LEAK  PATH  IS  BY  BI-PROP  BALL  VALVE  SEALS  AND 
ACTUATOR  SHAFT  SEALS,  INTO  ACTUATOR  CAVITY,  AND  OUT  ACTUATOR  VENT 
PORT.  FAILURE  OF  ACTUATOR  CAVITY  SEPARATION  SEALS  COULD  ALLOW 
MIXING  OF  HYPERGOLIC  PROPELLANTS  IN  ACTUATOR  AFTER  FAILURE  OF 
OTHER  SEALS. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099, 43AD,  BD 

4)  1181710  5)  JSC  11174,11.3  6)  JSC  12770 


REPORT  DATE  02/05/87 


C-244 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
2/lR 
1/1 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PNEUMATIC  ACTUATOR 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

343 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


PNEUMATIC  ACTUATOR 
EXTERNAL  LEAKAGE  (GN2) 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD;  D.J.  PAUL 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF; 

3/2R 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA; 

3/3 

DEORBIT; 

2/lR 

ATO: 

2/lR 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  MC621-0009 

CAUSES;  HOUSING  STRUCTURAL  FAILURE,  SEAL  FAILURES,  WELD  FAILURE, 
MATERIAL  DEFECT,  MANUFACTURING  DEFECT 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  AFFECTED  ENGINE  DUE  TO  INABILITY 
TO  OPEN  ONE  SET  OF  BI-PROP  VALVES.  WITH  FIRST  FAILURE,  ONE 
FAILURE  (SAME  FAILURE  IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST  FAILURE  DURING 
RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099,43AD,BD 

4)  1181710  5)  JSC  11174,11.3  6)  JSC  12770  7)  FLIGHT  RULE  6-26 


REPORT  DATE  02/05/87 


C-245 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

344 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM:  PNEUMATIC  ACTUATOR 

FAILURE  MODE:  DELAYED  OPERATION 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PNEUMATIC  ACTUATOR 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

2/2 

AO  A: 

DEORBIT: 

2/lR 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  IMPROPER  INPUT,  BINDING, 

CONTAMINATION 


EFFECTS/RATIONALE : 

FIRST  FAILURE  MAY  CAUSE  LOW  INITIAL  FUEL  AND  OXID  FLOW  RATES  TO 
ENGINE  RESULTING  IN  POSSIBLE  DAMAGE  TO  AND  LOSS  OF  ENGINE.  WITH 
FIRST  FAILURE,  ONE  FAILURE  (ACTUATOR  IN  REDUNDANT  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST 
FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE 
TO  LOSS  OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME- 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099,43AD,BD 

4)  1181710  5)  JSC  11174,11.3  6)  JSC  12770  7)  FLIGHT  RULE  6-26 


REPORT  DATE  02/05/87 


C-246 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/08/87 

SUBSYSTEM;  OMS 
MDAC  ID;  345 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM; 

FAILURE  MODE; 


COUPLING,  VENT  PORT  ACTUATOR  SHAFT  SEAL 
EXTERNAL  LEAKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  BIPROP  VALVE  ACTUATOR  SHAFT 

6) 

7) 

8) 

9) 


SEAL  VENT  PORT  COUPLING 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF: 

3/3 

TAL; 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ S AFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ 3 

LOCATION; 

PART  NUMBER;  ME276-0032 

CAUSES;  SEAL  FAILURE,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 
DEFECT,  HIGH  PRESSURE 

EFFECTS/RATIONALE : 

NO  EFFECT.  ACTUATOR  SHAFT  SEALS  EXPOSED  TO  AMBIENT. 


REFERENCES;  1)  1181700  2)  VS70-431099,SH.3  3)  VS70- 

943099, 43AD,BD 


REPORT  DATE  02/05/87 


C-247 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
/NA 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  BIPROP  VALVE  ACTUATOR  SHAFT  SEAL  VENT  PORT  COUPLING 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/08/87 

OMS 

346 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


ITEM: 

FAILURE  MODE: 


COUPLING,  VENT  PORT  ACTUATOR  SHAFT  SEAL 
FAILS  TO  COUPLE,  FAILS  TO  UNCOUPLE 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

/NA 

TAL: 

/NA 

AO  A: 

/NA 

ATO: 

3/3 


REDUNDANCY  SCREENS:  A [ 

LOCATION; 

PART  NUMBER:  ME276-0032 


HDW/FUNC 

/NA 

/NA 

/NA 

/NA 


C [ ] 


CAUSES;  PIECE-PART  STRUCTURAL  FAILURE 
MISHANDLING  ' 


PROCEDURAL  ERROR, 


EFFECTS/RATIONALE ; 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  1181700 

943099, 43AD,BD 


2)  VS70-431099,SH.3 


3)  VS70- 


REPORT  DATE  02/05/87 


C-248 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/08/87 

SUBSYSTEM:  OMS 

MDAC  ID:  347 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  /NA 


ITEM:  COUPLING,  VENT  PORT  ACTUATOR  SHAFT  SEAL 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO  CLOSE,  RESTRICTED  FLOW 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  BIPROP  VALVE  ACTUATOR  SHAFT  SEAL  VENT  PORT  COUPLING 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/3 

RTLS: 

/NA 

LIFTOFF: 

/NA 

TAL: 

/NA 

ONORBIT: 

/NA 

AO  A: 

/NA 

DEORBIT: 

/NA 

ATO; 

/NA 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 

PART  NUMBER:  ME276-0032 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  PROCEDURAL  ERROR, 

MISHANDLING,  CONTAMINATION 

EFFECTS/RATIONALE : 

NO  EFFECT.  POSSIBLE  LAUNCH  DELAY  ONLY. 


REFERENCES:  1)  1181700  2)  VS70-431099,SH.3  3)  VS70- 

943099, 43AD,BD 


REPORT  DATE  02/05/87 


C-249 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 

12/19/86 

OMS 

348 

HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 

HDW/FUNC 

2/lR 

1/1 

ITEM; 

PINION  GEAR  AND 

DRIVE  ASSEMBLY 

FAILURE  MODE:  FAILS  TO  OPERATE,  PHYSICAL  BINDING/ JAMMING 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PINION  GEAR  AND  DRIVE  ASSEMBLY 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL; 

ONORBIT; 

2/2 

AOA; 

DEORBIT; 

2/lR 

ATO; 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION; 

PART  NUMBER;  MC62 1-0009 


HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


C [ P 3 


CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  INADEQUATE  LUBRICATION, 
MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  CONTAMINATION 


EFFECTS/RATIONALE : 

WORST  CASE  EFFECTS  WITH  FAILURE  WHILE  BI-PROPS  CLOSED.  WITH 
FAILURE  TO  OPERATE  OF  ONE  ASSEMBLY  AND  RESULTING  LOSS  OF  AFFECTED 
ENGINE,  ONE  FAILURE  (ASSEMBLY  IN  OTHER  POD)  AWAY  FROM  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  FIRST  FAILURE 
DURING  RTLS  OR  TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
OF  ENGINE  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS 
DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL 
AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  JSC  11174,11.3  2)  MC621-0009  3)JSC  12770  4) 

JSC  18958  5)  VS70-943099,43AD,BD 


REPORT  DATE  02/05/87 


C-250 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

12/19/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT; 

2/lR 

MDAC  ID: 

349 

ABORT: 

1/1 

ITEM: 

PINION  GEAR 

AND  DRIVE  ASSEMBLY 

FAILURE  MODE:  STRUCTURAL 

LEAD  ANALYST;  C.D.  PRUST 

FAILURE,  FRACTURE 
SUBSYS  LEAD: 

D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  PINION  GEAR  AND  DRIVE  ASSEMBLY 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

2/2 

AOA; 

DEORBIT: 

2/lR 

ATO: 

LANDING/ SAFING; 

3/3 

HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


C [ P ] 


LOCATION; 

PART  NUMBER;  MC621-0009 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT, 

MAIIUFACTURING  DEFECT,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  INABILITY  TO  CONTROL  BI-PROP  VALVE. 

WORST  CASE  EFFECTS  WITH  FAILURE  WHILE  BI-PROP  VALVES  CLOSED  OR  IN 
MID-TRAVEL.  WITH  FAILURE  OF  ONE  GEAR/SHAFT  ASSEMBLY  AND  LOSS  OF 
AFFECTED  ENGINE,  ONE  FAILURE  (FAILURE  OF  GEAR/SHAFT  ASSEMBLY  IN 
EITHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS 
OF  BOTH  ENGINES.  FIRST  FAILURE  DURING  RTLS  OR  TAL  IS  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ENGINE  AND  POSSIBLE 
INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN 
POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 

REFERENCES;  1)  JSC  11174,11.3  2)  MC621-0009  3) JSC  12770  4) 

JSC  18958  5)  VS70-943099,43AD,BD 


REPORT  DATE  02/05/87 


C-251 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

350 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT:  3/2R 


ITEM;  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

FAILURE  MODE:  RESTRICTED  FLOW,  BLOCKAGE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PRESSURE  LINES  AND  MECHANICAL  FITTINGS 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL; 

ONORBIT: 

3/2R 

AO  A: 

DEORBIT: 
LANDING/S AFING: 

3/3 

3/3 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/2R 


REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES;  FILTER  BLOCKAGE,  CONTAMINATION 
EFFECTS/RATIONALE ; 

PURGE  VALVE  ASSY  LEG.  FIRST  FAILURE  IS  NO  EFFECT.  AFFECTED 
ENGINE  LOST  FOR  10  MIN  AFTER  SHUTDOWN  TO  ALLOW  FOR  SUBLIMATION  OF 
FROZEN  FUEL  IN  LINES.  OTHER  ENGINE  AVAILABLE  IF  BURN  REQUIRED 
WITHIN  10  MIN  PERIOD.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF 
MISSION  OBJECTIVES  DUE  TO  LOSS  OF  BOTH  ENGINES  FOR  10  MINUTES 
CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 


REFERENCES:  1)  73A000014  2)  VS70-431099  3)  AMS  5562  4)  SAE 

5622  5)  MB0160-007 


REPORT  DATE  02/05/87 


C-252 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/19/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

351 

ABORT: 

3/2R 

ITEM: 

VALVE-GN2 

PURGE 

FAILURE  MODE:  FAILS  TO  OPEN,  FAILS  TO 

REMAIN  OPEN 

LEAD  ANALYST:  C.D.  PRUST 

SUBSYS 

LEAD: 

D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1/2  VLVS 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  1186775 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  LOSS  OF 

INPUT,  MANUFACTURING  DEFECT 

EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  AFFECTED  ENGINE  LOST  FOR  10  MINUTES 
AFTER  SHUTDOWN  TO  ALLOW  FOR  SUBLIMATION  OF  FROZEN  PROP  IN  ENGINE 
LINES.  OTHER  ENGINE  AVAILABLE  IF  BURN  REQUIRED  WITHIN  10 
MINUTES.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION 
OBJECTIVES  DUE  TO  LOSS  OF  BOTH  ENGINES  FOR  10  MINUTES  AFTER 
BURNS.  CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE 
REQUIREMENT. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009,P.71  3)  VS70- 

943099, 43AD,BD  4)  JSC  11174,11.3  5)  VS70-431099,SH3  6)JSC 

12770  7)  JSC19950  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-253 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

3/lR 

2/lR 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1/2  VLVS 

6) 

7) 

8) 

9) 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/19/86 

OMS 

352 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


ITEM; 

FAILURE  MODE; 


VALVE -GN2  PURGE 

FAILS  TO  CLOSE,  FAILS  TO  REMAIN  CLOSED 


FLIGHT  PHASE 
PRE LAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS; 

3/2R 

TAL; 

3/2R 

AOA; 

3/lR 

ATO; 

3/3 

REDUNDANCY  SCREENS;  A [ 1 ] 
LOCATION; 

PART  NUMBER;  1186775 


HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


C [ P ] 


CAUSES;  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE 
INPUT,  MANUFACTURING  DEFECT  ' 


LOSS  OF 


EFFECTS/RATIONALE ; 

EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE 
MSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ALL  GN2  PRESSURANT,  INABILITY 
TO  MAINTAIN  OPEN  BI-PROP  VALVES,  AND  LOSS  OF  BOTH  ENGINES.  WITH 

RTLS  OR  TAL,  ONE  FAILURE  (FAILURE  OF  SERIES 
REMAIN  CLOSED)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  GN2  PRESSURANT  IN  ONE  POD,  LOSS  OF  AFFECTED 
ENGINE,  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESDLTIHG  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STOUCTD^L 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  1)  JSC  18958  2)  MC621-0009,  P.71  3)  VS70- 

943099, 43AD,BD  4)  JSC  11174,11.3  5)  VS70-431099,SH3  6)JSC 

12770  7)  JSC19950  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-254 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

353 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


ITEM:  VALVE -GN 2 PURGE 

FAILURE  MODE:  INTERNAL  LEAKAGE 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1/2  VLVS 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING; 

3/3 

' 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  1186775 

CAUSES:  SEAL  FAILURES,  MATERIAL  DEFECT,  CONTAMINATION,  PIECE- 

PART  STRUCTURAL  FAILURE,  HIGH  PRESSXJRE 


EFFECTS  /t?ATTQNATjF  • 

FAILURE  OF  FIRST  VALVE  SEAL  IS  NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY 
IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ALL  GN2 
PRESSURANT,  INABILITY  TO  MAINTAIN  OPEN  BI-PROP  VALVES,  AND 
SUBSEQUENT  LOSS  OF  BOTH  ENGINES.  WITH  FIRST  FAILURE  DURING  RTLS 
OR  TAL,  ONE  FAILURE  (SERIES  VALVE  SEAL)  AWAY  FROM  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  GN2  PRESSURANT  IN  ONE  POD,  LOSS  OF 
AFFECTED  ENGINE,  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL 
OMS  DUMP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROP  TANK  STRUCTURAL 
AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009,P.71  3)  VS70- 

943099, 43AD,BD  4)  JSC  11174,11.3  5)  VS70-43 1099 , SH3 

12770  7)  JSC19950  8)  TM-ES86009-43 


6)JSC 


REPORT  DATE  02/05/87 


C-255 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

354 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/2R 


ITEM: 

FAILURE  MODE: 
OF  FIRST  VALVE) 


VALVE-GN2  PURGE 

STRUCTURAL  FAILURE,  EXTERNAL  LEAKAGE  (DOWNSTREAM 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1/2  VLVS 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS; 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/2R 

3/3 

3/3 

A [ 2 ] 


RTLS: 

TAL: 

AOA: 

ATO; 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/2R 


C [ P ] 


LOCATION: 
PART  NUMBER; 


1186775 


MATERIAL 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  POSSIBLE  INADEQUATE  PURGE  r,-c< 

AFFECTeIJeH^^  1*^  ***°  injector  TEMP  READINGS. 

SUBLIMATION  OF  FROZEN  IN ’kNGI^^^ms  ®“Sss°OF^A^^ 

ct'SeI  JoR^Jf  °d^*^S  loss 

OONTINGENCT"SL"DTO™pS^fRlS«ECT" 

REFERENCES:  1)  JSC  18958  2)  MC621-0009  P 71  3^  v^7n 

943099,43AD,BD  4)  JSC  11174  11.3  5)  VSIO^^IOM  SM  61  JSC 

12770  7)  JSC19950  8)  TM-ES86009-43  ^J-L099,SH3  6)  JSC 


REPORT  DATE  02/05/87 


C-256 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/19/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

355 

ABORT: 

3/2R 

ITEM: 

VALVE-GN2  PURGE 

FAILURE  MODE 

: RESTRICTED  FLOW 

LEAD  ANALYST 

: C.D.  PRUST 

SUBSYS  LEAD: 

D.J.  PAUL 

BREAKDOWN  HIERARCHY; 


1) 

HARDWARE  COMPONENTS 

2) 

ASSEMBLIES 

3) 

OME 

SUBSYSTEM 

4) 

GN2 

ASSEMBLY 

5) 

OME 

PURGE  1/2  VLVS 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/2R 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  1186775 


CAUSES;  FILTER  BLOCKAGE,  CONTAMINATION 
EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  LOSS  OF  PURGE.  SUCCESS  OF  PURGE  DETECTABLE 
THROUGH  PC  AND  INJECTOR  TEMP  READINGS.  AFFECTED  ENGINE  LOST  FOR 
10  MIN  AFTER  EACH  USE  TO  ALLOW  FOR  SUBLIMATION  OF  FROZEN  PROP  IN 
ENGINE  LINES.  OTHER  ENGINE  AVAILABLE  IF  BURN  REQUIRED  WITHIN  10 
MIN  PERIOD.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION 
OBJECTIVES  DUE  TO  LOSS  OF  EACH  ENGINE  FOR  10  MIN  AFTER  EACH  BURN. 
CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 

REFERENCES:  1)  JSC  18958  2)  MC621-0009,P.71  3)  VS70- 

943099, 43AD,BD  4)  JSC  11174,11.3  5)  VS70-431099,SH3  6)JSC 

12770  7)  JSC19950  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-257 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

356 


ITEM:  VALVE-GN2  PURGE 

FAILURE  MODE:  DELAYED  OPERATION 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/2R 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1/2  VLVS 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/2R 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  1186775 


CAUSES;  CONTAMINATION,  IMPROPER  INPUT,  BINDING,  PIECE-PART 
STRUCTURAL  FAILURE 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  PURGE  CAPABILITY.  SUCCESS  OF 
PURGE  DETECTABLE  THROUGH  PC  AND  INJECTOR  TEMPERATURE  READINGS. 
AFFECTED  ENGINE  LOST  FOR  10  MINUTES  AFTER  SHUTDOWN  TO  ALLOW  FOR 
SUBLIMATION  OF  FROZEN  PROP  IN  ENGINE  LINES.  OTHER  ENGINE 
AVAILABLE  IF  BURN  REQUIRED  WITHIN  10  MINUTES.  LOSS  OF  ALL 
REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  OBJECTIVES  DUE  TO  LOSS  OF 
ENGINES  FOR  10  MINUTES  AFTER  BURNS.  CRIT  1/1  FOR  MANUAL  TAL 
CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 

REFERENCES;  1)  JSC  18958  2)  MC621-0009,P.71  3)  VS70- 

943099, 43AD,BD  4)  JSC  11174,11.3  5)  VS70-431099,SH3  6)JSC 

12770  7)  JSC19950  8)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-258 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/19/86 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID; 

357 

ABORT; 

3/2R 

ITEM: 

CHECK  VALVE-GN2 

PURGE 

FAILURE  MODE:  FAILS  TO  OPEN 

LEAD  ANALYST:  C.D.  PRUST 

SUBSYS  LEAD; 

D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 
3)  OME  SUBSYSTEM 
4}  GN2  ASSEMBLY 

5)  OME  PURGE  1/2  VLVS 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/2R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER;  MC62 1-0009 

CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  BINDING, 

MATERIAL  DEFECT,  MANUFACTURING  DEFECT 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT.  AFFECTED  ENGINE  LOST  FOR  10  MIN 
AFTER  SHUTDOWN  TO  ALLOW  FOR  SUBLIMATION  OF  FROZEN  FUEL  IN  ENGINE 
LINES.  OTHER  ENGINE  AVAILABLE  IF  BURN  REQUIRED  WITHIN  10  MIN 
PERIOD.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION 
OBJECTIVES  DUE  TO  LOSS  OF  ENGINES  FOR  10  MIN  AFTER  BURNS.  CRIT 
1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099 , 43AD, BD 

4)  VS70-431099,SH3  5)  JSC  11174,11.3  6)JSC  12770  7)  TM- 

ES86009-43 


REPORT  DATE  02/05/87 


C-259 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

358 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  CHECK  VALVE-GN2  PURGE 

FAILURE  MODE:  FAILS  TO  CLOSE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PURGE  CHECK  VALVE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/lR 

3/3 

ATO: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  CONTAMINATION,  PIECE-PART  STRUCTURAL  FAILURE,  BINDING, 

material  defect,  manufacturing  DEFECT 


EFFECTS/RATIONALE : 

FAILURE  UNDETECTABLE  DURING  FLIGHT.  FIRST  FAILURE  IS  NO  EFFECT. 
FUEL  WILL  FLOW  TO  DOWNSTREAM  PURGE  VALVE  DXJRING  ENGINE  BURN,  BUT 
WILL  BE  FORCED  OUT  BY  NOMINALLY  PERFORMED  PURGE.  LOSS  OF  ALL 
REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  POSSIBLE  LOSS 
OF  BOTH  ENGINES.  PASSAGE  OF  FUEL  INTO  PNEUMATIC  SUBSYSTEM  COULD 
RESULT  IN  LOSS  OF  SUBSYSTEM  AND  ENGINE. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099, 43AD,  BD 

4)  VS70-431099,SH3  5)  JSC  11174,11.3  6)JSC  12770  7)  TM- 

ES86009-43 


REPORT  DATE  02/05/87 


C-260 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

359 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  CHECK  VALVE-GN2  PURGE 

FAILURE  MODE:  INTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PURGE  CHECK  VALVE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ F ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  SEAL  FAILURE,  MATERIAL  DEFECT,  CONTAMINATION, 

MANUFACTURING  DEFECT,  HIGH  PRESSURE 


EFFECTS/RATIONALE ; 

FAILURE  UNDETECTABLE  DURING  FLIGHT.  FIRST  FAILURE  IS  NO  EFFECT. 
FUEL  WILL  FLOW  TO  DOWNSTREAM  PURGE  VALVE  DURING  ENGINE  BURN,  BUT 
WILL  BE  FORCED  OUT  BY  NOMINALLY  PERFORMED  PURGE.  LOSS  OF  ALL 
REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  POSSIBLE  LOSS 
OF  BOTH  ENGINES.  PASSAGE  OF  FUEL  INTO  PNEUMATIC  SUBSYSTEM  COULD 
RESULT  IN  LOSS  OF  SUBSYSTEM  AND  ENGINE. 


REFERENCES:  1)  JSC  18958  2)  MC621-0009  3)  VS70-943099 , 4 3AD, BD 

4)  VS70-431099,SH3  5)  JSC  11174,11.3  6)JSC  12770  7)  TM- 

ES86009-43 


REPORT  DATE  02/05/87 


C-261 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/19/86 

SUBSYSTEM:  OMS 

MDAC  ID:  360 


ITEM:  ORIFICE -GN2  PURGE 

FAILURE  MODE:  RESTRICTED  FLOW 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/2R 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PURGE  ORIFICE 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


HDW/FUNC 

3/3 

3/3 

3/3 

3/2R 


C [ P ] 


CAUSES;  CONTAMINATION 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT.  AFFECTED  ENGINE  LOST  FOR  10  MIN 
AFTER  SHUTDOWN  TO  ALLOW  FOR  SUBLIMATION  OF  FROZEN  FUEL  IN  ENGINE 
LINES.  OTHER  ENGINE  AVAILABLE  IF  BURN  REQUIRED  WITHIN  10  MIN 
PERIOD.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION 
OBJECTIVES  DUE  TO  LOSS  OF  ENGINES  FOR  10  MINUTES  AFTER  BURNS. 
CRIT  1/1  FOR  MANUAL  TAL  CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 


REFERENCES:  1)  MC621-0009  2)  JSC  11174,11.3  3)  VS70-43 1099 , SH3 

4)  VS70-943099,  43AD,  BD  5)  TM-ESB6009-43 


REPORT  DATE  02/05/87 


C-262 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

361 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/2R 


ITEM:  GN2  PURGE  VALVES  TEST  PORT 

FAILURE  MODE:  EXTERNAL  LEAKAGE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  PURGE  VALVES  TEST  PORT 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER;  MC621-0009 


CAUSES:  SEAL  FAILURE,  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL 

DEFECT,  HIGH  PRESSURE 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  POSSIBLE  INADEQUATE  PURGE.  SUCCESS  OF 
PURGE  DETECTABLE  THROUGH  PC  AND  INJECTOR  TEMP  READINGS. 

AFFECTED  ENGINE  LOST  FOR  10  MIN  AFTER  EACH  BURN  TO  ALLOW  FOR 
SUBLIMATION  OF  FROZEN  FUEL  IN  ENGINE  LINES.  LOSS  OF  ALL 
REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  OBJECTIVES  DUE  TO  LOSS  OF 
ENGINES  FOR  10  MIN  AFTER  BURNS.  CRIT  1/1  FOR  MANUAL  TAL 
CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 

REFERENCES:  1)  VS70-431099,SH3  2)  VS70-943099, 43AD,BD  3)  JSC 

11174,11.3  4)  TM-ES86009-43 


REPORT  DATE  02/05/87 


C-263 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  12/15/86  HIGHEST  CRITICALITY 

SUBSYSTEM:  OMS  FLIGHT; 

MDAC  ID;  362  ABORT; 

ITEM;  GIMBAL  RING 

FAILURE  MODE;  STRUCTURAL  FAILURE 

LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  GIMBAL  RING 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  1/1  RTLS; 

LIFTOFF;  1/1  TAL; 

ONORBIT:  1/1  AOA: 

DEORBIT:  1/1  ATO; 

LANDING/SAFING;  1/1 

REDUNDANCY  SCREENS;  A [ ] B [ ] 

LOCATION: 

PART  NUMBER;  MC62 1-0009 

CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT, 
MANUFACTURING  DEFECT,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  EXCESSIVE 
MOVEMENT  OF  ENGINE  RESULTING  IN  POSSIBLE  RUPTURE  OF  CONNECTING 
PROP  LINES  ALLOWING  LOSS  AND  LEAKAGE  OF  PROP,  FIRE/EXPLOSION 
HAZARD,  AND  HAZARD  TO  GROUND  CREW. 


REFERENCES;  1)  MC621-0009  2)  MC621-0059  3)  JSC  12770  4)  JSC 

18958 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


C [ ] 


HDW/FUNC 

1/1 

1/1 


REPORT  DATE  02/05/87 


C-264 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

363 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

2/lR 


ITEM:  BEARING-GIMBAL  RING 

FAILURE  MODE:  FAILS  TO  FUNCTION,  PHYSICAL  BINDING/JAMMING 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  GIMBAL  RING  BEARING 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/2R 

TAL: 

3/3 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO; 

2/lR 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  INADEQUATE  LUBRICATION, 

MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

FIRST  FAILURE  MAY  RESULT  IN  LOSS  OF  ENGINE  DUE  TO  LOSS  OF  ENGINE 
CONTROL.  WITH  FIRST  FAILURE,  ONE  FAILURE  (GIMBAL  BEARING  IN 
OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
ORBITER  CONTROL  DURING  OMS  ENGINE  FIRING  AND  SUBSEQUENT  LOSS  OF 
BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE  CONTROL  MAY  BE 
EXCESSIVE.  CRIT  1/1  FOR  MANUAL  TAL  POST-MECO  OMS  DUMP  DUE  TO 
POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES;  1)  MC621-0009  2)  JSC  12770  3)  JSC  18958 


REPORT  DATE  02/05/87 


C-265 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/19/86 

SUBSYSTEM:  OMS 

MDAC  ID:  364 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  1/1 

ABORT:  1/1 


ITEM:  GIMBAL  RING  MOUNTING  PAD 

FAILURE  MODE:  STRUCTURAL  FAILURE,  FRACTURE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  GIMBAL  RING  MOUNTING  PAD 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  1/1  RTLS: 

LIFTOFF;  1/1  TAL: 

ONORBIT;  1/1  AOA; 

DEORBIT;  1/1  ATO; 

LANDING/ SAFING;  1/1 

REDUNDANCY  SCREENS;  A [ ] B [ ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MATERIAL  DEFECT, 

MANUFACTURING  DEFECT,  MECHANICAL  SHOCK 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  POSSIBLE 
EXCESSIVE  MOVEMENT  OF  ENGINE  RESULTING  IN  POSSIBLE  RUPTURE  OF 
CONNECTING  PROP  LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO 
GROUND  CREW. 


HDW/FUNC 

1/1 

1/1 

1/1 

1/1 


REFERENCES:  1)  MC621-0009  2)  MC621-0059,  P.118  3)  JSC  12770 


REPORT  DATE  02/05/87 


C-266 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/19/86 

OMS 

365 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


ITEM;  MOTOR-GIMBAL  DRIVE 

FAILURE  MODE;  LOSS  OF  OUTPUT,  FAILS  TO  OPERATE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  GIMBAL  DRIVE  MOTOR 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/2R 

TAL; 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/lR 

ATO: 

3/lR 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION; 

PART  NUMBER:  MC62 1-0009 

CAUSES;  LOSS  OF  INPUT,  ELECTRICAL  FAILURE,  PIECE-PART  STRUCTURAL 
FAILURE,  BINDING,  MANUFACTURING  DEFECT,  MATERIAL  DEFECT 

EFFECTS/RATIONALE : 

FAILURE  OF  FIRST  CHANNEL  MOTOR  IS  NO  EFFECT;  SWITCH  TO  REDUNDANT 
CHANNEL.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  ORBITER  CONTROL  DURING  ENGINE  FIRING  AND 
SUBSEQUENT  LOSS  OF  BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE 
CONTROL  MAY  BE  EXCESSIVE.  CRIT  2/lR  FOR  MANUAL  TAL  POST-MECO  OMS 
DUMP  DUE  TO  POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES;  1)  MC621-0009 
4)  JSC  12770  5)  JSC  18958 


2)  621-0009-2161 
6)  JSC  19950 


3)  JSC  11174,9.13 


REPORT  DATE  02/05/87 


C-267 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

12/19/86 

OMS 

366 

HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 

HDW/FUNC 

3/lR 

3/lR 

ITEM: 

MOTOR-GIMBAL  DRIVE 

FAILURE  MODE:  ERRATIC  OPERATION  (DELAYED  OPERATION,  SLOW 

RESPONSE,  INADVERTENT/ PREMATURE  OPERATION,  FAILS  TO  STOP) 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  GIMBAL  DRIVE  MOTOR 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/2R 

3/2R 

3/lR 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 

REDUNDANCY  SCREENS: 

A [ 1 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 


CAUSES:  IMPROPER  INPUT,  ELECTRICAL  FAILURE,  PIECE-PART 

STRUCTURAL  FAILURE,  BINDING,  MANUFACTURING  DEFECT,  MATERIAL 
DEFECT 


EFFECTS/RATIONALE : 

FAILURE  OF  FIRST  CHANNEL  MOTOR  IS  NO  EFFECT?  SWITCH  TO  REDUNDANT 
CHANNEL.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  ORBITER  CONTROL  DURING  ENGINE  FIRING  AND 
SUBSEQUENT  LOSS  OF  BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE 
CONTROL  MAY  BE  EXCESSIVE.  CRIT  2/lR  FOR  MANUAL  TAL  POST-MECO  OMS 
DUMP  DUE  TO  POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES:  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174.9.13 

4)  JSC  12770  5)  JSC  18958  6)  JSC  19950 


REPORT  DATE  02/05/87 


C-268 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

367 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  ACME  SCREW/NUT  TUBE 

FAILURE  MODE:  FAILS  TO  OPERATE,  PHYSICAL  BINDING/ JAMMING  BETWEEN 

ACME  SCREW  AND  NUT  TUBE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  ACME  SCREW/NUT  TUBE 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

2/2 

AO  A: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A C 2 ] 

B C P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  MECHANICAL 

SHOCK,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  INABILITY  TO  ROTATE  ACME  SCREW  OR  NUT 
TUBE  AND,  THEREFORE,  LOSS  OF  ACTUATOR.  WITH  FIRST  FAILURE  AND 
RESULTING  LOSS  OF  AFFECTED  ENGINE,  ONE  FAILURE  (SAME  FAILURE  IN 
OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE  CONTROL  MAY  BE 
EXCESSIVE.  CRIT  1/1  FOR  MANUAL  TAL  POST-MECO  OMS  DUMP  DUE  TO 
POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 

REFERENCES:  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174,9.13 

4)  JSC  12770  5)  JSC  18958  6)  JSC  19950 


REPORT  DATE  02/05/87 


C-269 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

368 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  ACME  SCREW/NUT  TUBE 

FAILURE  MODE:  STRUCTURAL  FAILURE,  FRACTURE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

HARDWARE  COMPONENTS 

2) 

ASSEMBLIES 

3) 

OME  SUBSYSTEM 

4) 

TVC  ASSEMBLY 

5) 

ACTUATOR 

6) 

ACME  SCREW/NUT  TUBE 

7) 

S) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

2/2 

AOA: 

DEORBIT: 

2/lR 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 


HDW/FUNC 

3/3 

3/3 

3/3 

2/lR 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE, 

MATERIAL  DEFECT,  MANUFACTURING  DEFECT 


MECHANICAL  SHOCK, 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  TVC  CONTROL  OF  ENGINE  AND 
THEREFORE,  LOSS  OF  AFFECTED  ENGINE.  FIRST  FAILURE  MAY  ALSO 
RESULT  IN  LOSS  OF  ENGINE  RESTRAINT  ALLOWING  INADVERTENT  FULL 
RANGE  DEFLECTIONS  OF  ENGINE  WITHIN  GIMBAL  RING  CONSTRAINTS 
(DETECTABLE  THROUGH  ACTUATOR  LVDTS).  WITH  FIRST  FAILURE,  ONE 
FAILURE  (SAME  FAILURE  IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR 
VEHICLE  CONTROL  MAY  BE  EXCESSIVE.  CRIT  1/1  FOR  MANUAL  TAL  POST- 
MECO  OMS  DUMP  DUE  TO  POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES:  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174,9.13 

4)  JSC  12770  5)  JSC  18958  6)  JSC  19950 


REPORT  DATE  02/05/87 


C-270 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

369 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  REDUCTION  GEAR 

FAILURE  MODE:  FAILS  TO  OPERATE,  PHYSICAL  BINDING/ JAMMING 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  REDUCTION  GEAR 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL; 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO; 

LANDING/SAFING ; 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 


C [ P ] 


LOCATION: 

PART  NUMBER:  MC621-0009 

CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  INADEQUATE 

LUBRICATION,  MATERIAL  DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT;  SWITCH  TO  REDUNDANT  CHANNEL.  LOSS  OF 
ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
ORBITER  CONTROL  DURING  ENGINE  FIRING  AND  SUBSEQUENT  LOSS  OF  BOTH 
ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE  CONTROL  MAY  BE 
EXCESSIVE.  CRIT  2/lR  FOR  MANUAL  TAL  POST-MECO  OMS  DUMP  DUE  TO 
POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES:  1)  MC621-0009  2)  621-0009-2161 

4)  JSC  12770  5)  JSC  18958  6)  JSC  19950 


3)  JSC  11174,9.13 


REPORT  DATE  02/05/87 


C-271 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

370 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  REDUCTION  GEAR 

FAILURE  MODE:  STRUCTURAL  FAILURE,  FRACTURE 


HDW/FUNC 

3/lR 

3/lR 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  REDUCTION  GEAR 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] 


B [ P ] 


LOCATION: 

PART  NUMBER:  MC62 1-0009 


HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE, 

MATERIAL  DEFECT,  MANUFACTURING  DEFECT 


MECHANICAL  SHOCK, 


EFFECTS/RATIONALE : 

EFFECT;  SWITCH  TO  REDUNDANT  CHANNEL  LOS <5  OP 
ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OP  LIPE/Vrai^  ^^O  LOS^ol 

SifvF  CONTROL  BE 

MANUAL  TAL  POST-MECO  OMS  DUMP  DUE  TO 
POSSIBLE  LOSS  OF  VEHICLE  CONTROL.  ^ 


REFERENCES:  1)  MC621-0009 

4)  JSC  12770  5)  JSC  18958 


2)  621-0009-2161 
6)  JSC  19950 


3)  JSC  11174,9.13 


REPORT  DATE  02/05/87 


C-272 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID; 


12/19/86 

OMS 

371 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


ITEM;  ANTI BACK  DEVICE 

FAILURE  MODE;  FAILS  TO  ROTATE,  PHYSICAL  BINDING/ JAMMING 


LEAD  ANALYST;  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 
2}  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  ANTIBACK  DEVICE 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF: 

3/2R 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER;  MC621-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  CONTAMINATION,  INADEQUATE 

LUBRICATION,  MATERICAL  DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT;  SWITCH  TO  REDUNDANT  CHANNEL.  LOSS  OF 
ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  LOSS  OF 
ORBITER  CONTROL  DURING  ENGINE  FIRING  AND  SUBSEQUENT  LOSS  OF  BOTH 
ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE  CONTROL  MAY  BE 
EXCESSIVE.  CRIT  2/lR  FOR  MANUAL  TAL  POST-MECO  OMS  DUMP  DUE  TO 
POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES;  1)  MC621-0009  2)  621-0009-2161 

4)  JSC  12770  5)  JSC  18958  6)  JSC  19950 


3)  JSC  11174,9.13 


REPORT  DATE  02/05/87 


C-273 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/19/86  HIGHEST  CRITICALITY 

SUBSYSTEM:  OMS  FLIGHT: 

MDAC  ID:  372  ABORT: 

ITEM:  ANTIBACK  DEVICE 

FAILURE  MODE:  FAILS  TO  STOP  ROTATION  OF  UNUSED  CHANNEL 

LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  ANTIBACK  DEVICE 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS: 

LIFTOFF:  3/2R  TAL: 

ONORBIT;  3/2R  AOA: 

DEORBIT:  3/lR  ATO: 

LANDING/S AFING:  3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 

LOCATION: 

PART  NUMBER;  MC62 1-0009 

CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  MECHANICAL  SHOCK, 
MATERIAL  DEFECT,  MANUFACIURING  DEFECT 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT;  SWITCH  TO  REDUNDANT  CHANNEL.  LOSS  OF 
ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
ORBITER  CONTROL  DURING  ENGINE  FIRING  AND  SUBSEQUENT  LOSS  OF  BOTH 
ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE  CONTROL  MAY  BE 
EXCESSIVE.  CRIT  2/lR  FOR  MANUAL  TAL  POST-MECO  OMS  DUMP  DUE  TO 
POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES;  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174,9.13 

4)  JSC  12770  5)  JSC  18958  6)  JSC  19950 


HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 


C [ P ] 


HDW/FUNC 

3/lR 

3/lR 


REPORT  DATE  02/05/87 


C-274 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/19/86 

OMS 

373 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  ANTIBACK  DEVICE 

FAILURE  MODE:  STRUCTURAL  FAILURE,  FRACTURE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  ANTIBACK  DEVICE 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  MECHANICAL  SHOCK,  LOSS  OF 

GEAR  MESHING,  STRIPPING,  TOOTH  FRACTURES,  MATERIAL  DEFECT, 
MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

STRUCTURAL  FAILURE  OR  FRACTURE  OF  ONE  ANTIBACK  DEVICE  SUCH  THAT 
DEVICE  CAN  NEITHER  TRANSMIT  MOTOR  TORQUE  FOR  ACTIVE  CHANNEL 
OPERATION  OR  STOP  ROTATION  OF  UNUSED  CHANNEL  (LOSS  OF  GEAR 
MESHING,  TOOTH  FRACTURES,  STRIPPING)  RESULTS  IN  LOSS  OF  TVC 
CONTROL  OF  ENGINE  AND  SUBSEQUENT  LOSS  OF  AFFECTED  ENGINE.  WITH 
FIRST  FAILURE,  ONE  FAILURE  (SAME  FAILURE  IN  OTHER  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  BOTH  ENGINES.  RCS 
USAGE  REQUIRED  FOR  VEHICLE  CONTROL  MAY  BE  EXCESSIVE.  CRIT  1/1 
FOR  MANUAL  TAL  POST-MECO  OMS  DUMP  DUE  TO  POSSIBLE  LOSS  OF  VEHICLE 
CONTROL. 

REFERENCES:  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174,9.13 

4)  JSC  12770  5)  JSC  18958  6)  JSC  19950 


REPORT  DATE  02/05/87 


C-275 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  374 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  BEARING-GIMBAL  THRUST  DRIVE 

FAILURE  MODE:  STRUCTURAL  FAILURE,  FRACTURE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  GIMBAL  DRIVE  THRUST  BEARING 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/2R  TAL: ’ 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/lR  ATO: 

LANDING/SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE, 

MATERIAL  DEFECT,  MANUFACTURING  DEFECT 


MECHANICAL  SHOCK, 


EFFECTS/RATIONALE : 

FIRST  FAILURE  CAUSES  POSSIBLE  JAMMING  OF  CHANNEL;  SWITCH  TO 
SECONDARY  CHANNEL.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  ORBITER  CONTROL  DURING  ENGINE  FIRING 
AND  SUBSEQUENT  LOSS  OF  BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR 
VEHICLE  CONTROL  MAY  BE  EXCESSIVE. 


REFERENCES:  1)  MC621-0009  2)  621-0009-2161 

4)  JSC  12770  5)  JSC  18958  6)  JSC  19950 


3)  JSC  11174,9.13 


REPORT  DATE  02/05/87 


C-276 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM;  OMS 
MDAC  ID;  375 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


ITEM;  BEARING-GIMBAL  THRUST  DRIVE 

FAILURE  MODE;  PHYSICAL  BINDING/JAMMING 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  GIMBAL  DRIVE  THRUST  BEARING 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/2R 

TAL; 

3/3 

ONORBIT; 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/SAFING; 
REDUNDANCY  SCREENS; 

3/3 

A [ 2 ] 

B [ P ] 

C [ P 3 

LOCATION; 

PART  NUMBER;  MC62 1-0009 


CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  INADEQUATE  LUBRICATION, 
MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE ; 

FIRST  FAIIURE  IS  NO  EFFECT;  SWITCH  TO  SECONDARY  CHANNEL.  LOSS  OF 
ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF 
ORBITER  CONTROL  DURING  ENGINE  FIRING  AND  SUBSEQUENT  LOSS  OF  BOTH 
ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE  CONTROL  MAY  BE 
EXCESSIVE.  CRIT  2/lR  FOR  MANUAL  TAL  POST-MECO  ONS  DUMP  DUE  TO 
POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES:  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174,9.13 

4)  JSC  12770  5)  JSC  18958  6)  JSC  19950 


REPORT  DATE  02/05/87 


C-277 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

376 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  BEARING-SPHERICAL  ROD  END 

FAILURE  MODE:  PHYSICAL  BINDING/ JAMMING 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1) 

HARDWARE  COMPONENTS 

2) 

ASSEMBLIES 

3) 

OME  SUBSYSTEM 

4) 

TVC  ASSEMBLY 

5) 

ACTUATOR 

6) 

SPHERICAL  ROD  END  BEARING 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  INADEQUATE  LUBRICATION, 

MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  POSSIBLE  INABILITY  TO  MOVE  ENGINE  AND 
SUBSEQUENT  LOSS  OF  AFFECTED  ENGINE.  WITH  FIRST  FAILURE,  ONE 
FAILURE  (BEARING  IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  ORBITER  CONTROL  DURING  ENGINE  FIRING 
AND  SUBSEQUENT  LOSS  OF  BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR 
VEHICLE  CONTROL  MAY  BE  EXCESSIVE.  CRIT  1/1  FOR  MANUAL  TAL  POST- 
MECO  OMS  DUMP  DUE  TO  POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 

REFERENCES:  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174,9.13 

4)  MC621-0059,  P.118  5)  JSC  12770 


REPORT  DATE  02/05/87 


C-278 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

377 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  BEARING-SPHERICAL  ROD  END 

FAILURE  MODE:  STRUCTURAL  FAILURE,  FRACTURE 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  SPHERICAL  ROD  END  BEARING 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/2R 

TAL: 

3/3 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621- 

•0009 

CAUSES:  PIECE-PART 

STRUCTURAL 

FAILURE,  MECHANICAL  SHOCK, 

MATERIAL  DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  POSSIBLE  INABILITY  TO  MOVE  ENGINE  AND 
SUBSEQUENT  LOSS  OF  AFFECTED  ENGINE.  WITH  FIRST  FAILURE,  ONE 
FAILURE  (BEARING  IN  OTHER  POD)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  ORBITER  CONTROL  DURING  ENGINE  FIRING 
AND  SUBSEQUENT  LOSS  OF  BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR 
VEHICLE  CONTROL  MAY  BE  EXCESSIVE.  CRIT  1/1  FOR  MANUAL  TAL 
POST-MECO  OMS  DUMP  DUE  TO  POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 

REFERENCES:  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174,9.13 

4)  MC621-0059,  P.118  5)  JSC  12770 


REPORT  DATE  02/05/87 


C-279 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

378 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

2/lR 


ITEM:  MECHANICAL  STOP-SNUBBER 

FAILURE  MODE:  STRUCTURAL  FAILURE,  FAILS  OUT  OF  TOLERANCE 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  SNUBBER,  MECHANICAL  STOP 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/2R  TAL:  ’ 

ONORBIT;  2/2  AOA* 

DEORBIT:  2/lR  AToi 

LANDING/SAFING:  3/3 


REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


HDW/FUNC 

3/3 

3/3 

3/3 

2/lR 


C [ P ] 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE, 

MANUFACTURING  DEFECT,  MECHANICAL  SHOCK 


MATERIAL  DEFECT, 


EFFECTS/RATIONALE : 

RESULT  IN  LOSS  OF  ACTUATOR  POSITION  ADJUSTMENT 
OR  POSSIBLE  JAMMING  OF  ACTUATOR  AND  POSSIBLE  LOSS  OF  TVC  FOR 

'^^th  first  failure  and  resulting  loss  of 

^FECTED  ENGINE,  ONE  FAILURE  (SNUBBER  IN  OTHER  POD)  AWAY  FROM 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  ORBITER  CONTROL 

firing  and  loss  of  both  engines,  rcs  usage 

REQUIRED  FOR  VEHICLE  CONTROL  MAY  BE  EXCESSIVE.  CRIT  1/1  FOR 

MANUAL  TAL  POST-MECO  OMS  DUMP  DUE  TO  POSSIBLE  LOSS  OF  VEHICLE 
CuNTx\OXj  • 


REFERENCES:  1)  MC621-0009  2)  621-0009-2161 

4)  MC621-0059,  P.118  5)  JSC  12770 


3)  JSC  11174,9.13 


REPORT  DATE  02/05/87 


C-280 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

379 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  BEARING-NUT  TUBE/OUTPUT  SHAFT 

FAILURE  MODE:  PHYSICAL  BINDING/ JAMMING 


LEAD  ANALYST:  C.D.  PRUST 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  NUT  TUBE/OUTPUT  SHAFT  BEARING 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B C P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC62 1-0009 


CAUSES:  PIECE-PART  STRUCTURAL  FAILURE,  INADEQUATE  LUBRICATION, 

MATERIAL  DEFECT,  MANUFACTURING  DEFECT,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  SECONDARY  CHANNEL  DUE  TO 
INABILITY  OF  NUT  TUBE  TO  ROTATE  AROUND  STATIONARY  INNER  OUTPUT 
SHAFT;  SWITCH  TO  PRIMARY  CHANNEL  (NUT  TUBE  DOES  NOT  ROTATE). 
LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
LOSS  OF  ORBITER  CONTROL  DURING  ENGINE  FIRING  AND  SUBSEQUENT  LOSS 
OF  BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE  CONTROL  MAY  BE 
EXCESSIVE.  CRIT  2/lR  FOR  MANUAL  TAL  POST-MECO  OMS  DUMP  DUE  TO 
POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES:  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174,9.13 

4)  MC621-0059,  P.118  5)  JSC  12770 


REPORT  DATE  02/05/87 


C-281 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

380 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT;  3/lR 


ITEM;  BEARING-NUT  TUBE/OUTPUT  SHAFT 

FAILURE  MODE;  STRUCTURAL  FAILURE,  FRACTURE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  NUT  TUBE/OUTPUT  SHAFT  BEARING 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL; 

ONORBIT; 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO; 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION; 

PART  NUMBER;  MC62 1-0009 


HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 


C [ P ] 


CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  MECHANICAL  SHOCK, 
MATERIAL  DEFECT,  MANUFACTURING  DEFECT 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  SECONDARY  CHANNEL  DUE  TO 
INABILITY  OF  NUT  TUBE  TO  ROTATE  AROUND  STATIONARY  INNER  OUTPUT 
SHAFT;  SWITCH  TO  PRIMARY  CHANNEL  (NUT  TUBE  DOES  NOT  ROTATE). 
LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
LOSS  OF  ORBITER  CONTROL  DURING  ENGINE  FIRING  AND  SUBSEQUENT  LOSS 
OF  BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE  CONTROL  MAY  BE 
EXCESSIVE.  CRIT  2/lR  FOR  MANUAL  TAL  POST-MECO  OMS  DUMP  DUE  TO 
POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES;  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174,9.13 

4)  MC621-0059,  P.118  5)  JSC  12770 


REPORT  DATE  02/05/87 


C-282 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/30/86 

OMS 

381 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  1/1 

ABORT;  1/1 


ITEM;  OUTPUT  SHAFT 

FAILURE  MODE;  STRUCTURAL  FAILURE,  FRACTURE,  DISATTACHMENT  OF 
ACTUATOR  TO  ENGINE 


LEAD  ANALYST;  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR 

6)  OUTPUT  SHAFT 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

1/1 

LIFTOFF; 

1/1 

TAL; 

1/1 

ONORBIT; 

2/2 

AOA; 

1/1 

DEORBIT; 

2/lR 

ATO; 

1/1 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION; 

PART  NUMBER;  MC621-0009 

CAUSES;  PIECE-PART  STRUCTURAL  FAILURE,  MECHANICAL  SHOCK, 
MATERIAL  DEFECT,  MANUFACTURING  DEFECT 

EFFECTS/RATIONALE; 

FIRST  FAILURE  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  INSERTION 
BURN  OR  ABORT  DUMP.  STRUCTURAL  FAILURE  OF  SHAFT  MAY  ALLOW 
MOVEMENT  (>1.5  DEG)  OF  NOZZLE  INTO  MAX  Q FLOWSTREAM  WHERE 
BUCKLING  COULD  OCCUR.  FAILURE  MAY  NOT  CAUSE  DEFLECTION  OF 
ACTUATOR  ARM  AND,  THEREFORE,  MAY  NOT  BE  DETECTED  BY  ACTUATOR 
LVDT.  SUBSEQUENT  FIRING  OF  ENGINE  WITH  UNDETECTED  DAMAGE  MAY 
CAUSE  POD/VEHICLE  DAMAGE  RESULTING  FROM  THROAT/NOZZLE  BURN 
THROUGH. 

REFERENCES;  1)  MC621-0009  2)  621-0009-2161  3)  JSC  11174,9.13 

4)  MC621-0059,  P.118  5)  JSC  12770  6)  FLIGHT  RULE  6-57  7)  JSC 

18958 


REPORT  DATE  02/05/87 


C-283 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

3/lR 

3/lR 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  GIMBAL  ACTUATOR  CONTROLLER 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/07/87 

OMS 

382 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


GIMBAL  ACTUATOR  CONTROLLER 
LOSS  OF  OUTPUT 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


LOCATION: 

PART  NUMBER:  MC62 1-0009 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  LOSS  OF  INPUT  POWER, 

FAILURE,  MANUFACTURING  DEFECT 


ELECTRICAL  FAILURE, 


PIECE-PART 


EFFECTS/RATIONALE : 

FIRST  CHANNEL  IS  NO  EFFECT;  SWITCH  TO  REDUNDANT 

^ redundancy  IS  POSSIBLE  LOSS  OF  LIFE/ VEHICLE 
DUE  TO  LOSS  OF  ORBITER  CONTROL  DURING  ENGINE  FIRING  AND 

ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE 
excessive.  CRIT  2/lR  FOR  MANUAL  TAL  POST-MECO  OMS 
DUMP  DUE  TO  POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES:  1)  MC621-0009 

4)  JSC  12770  5)  JSC  18958 


2)  621-0009-2161 

6)  JSC  19950 


3)  JSC  11174,9.13 


REPORT  DATE  02/05/87 


C-284 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/07/87 

SUBSYSTEM:  OMS 

MDAC  ID:  383 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  GIMBAL  ACTUATOR  CONTROLLER 

FAILURE  MODE:  ERRONEOUS/ERRATIC  OUTPUT,  FAILS  TO  STOP 


LEAD  ANALYST:  C.D.  PRUST  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  HARDWARE  COMPONENTS 

2)  ASSEMBLIES 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  GIMBAL  ACTUATOR  CONTROLLER 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/2R 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 

PART  NUMBER:  MC621-0009 


CAUSES;  ELECTRICAL  FAILURE,  PIECE-PART  FAILURE,  MANUFACTURING 
DEFECT 


EFFECTS/RATIONALE : 

FAILURE  OF  FIRST  CHANNEL  IS  NO  EFFECT;  SWITCH  TO  REDUNDANT 
CHANNEL.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  ORBITER  CONTROL  DURING  ENGINE  FIRING  AND 
SUBSEQUENT  LOSS  OF  BOTH  ENGINES.  RCS  USAGE  REQUIRED  FOR  VEHICLE 
CONTROL  MAY  BE  EXCESSIVE.  CRIT  2/lR  FOR  MANUAL  TAL  POST-MECO  OMS 
DUMP  DUE  TO  POSSIBLE  LOSS  OF  VEHICLE  CONTROL. 


REFERENCES:  1)  MC62 1-0009 

4)  JSC  12770  5)  JSC  18958 


2)  621-0009-2161 

6)  JSC  19950 


3)  JSC  11174,9.13 


REPORT  DATE  02/05/87 


C-285 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  384 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE:  FAILS  OPEN  (NO  OUTPUT) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/lR 

LIFTOFF; 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

LANDING/SAFING; 

3/lR 

3/3 

ATO: 

3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4 

, PCA  1;  AV 

BAY  6,  PCA  3 

PART  NUMBER:  56V76A131RPC37,  35 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  HE  ISOL  A VALVE.  VALVE  CAN  STILL  BE 
FULLY  OPERATED  USING  SWITCH.  LOSS  OF  ALL  REDUNDANCY  WOULD  BE  THE 
SAME  AS  HE  ISOL  A & B FAILING  CLOSED  RESULTING  IN  AN  INABILITY  TO 
USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-286 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  385 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE LAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/lR 

TAL; 

3/lR 

ONORBIT: 

3/lR 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/SAFING: 

3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION;  AV  BAY  4 

, PCA  1;  AV 

BAY 

6,  PCA  3 

PART  NUMBER:  56V76A131RPC37,  35 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  HE  ISOL  A VALVE  FAILED  OPEN,  NO  EFFECT 
ON  MISSION.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF 
PROP  TANKS  OR  LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GND 
CREW. 


REFERENCES:  VS70-943099  REV  A EO  B12 ; MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-287 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/12/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/lR 

MDAC  ID: 

386 

ABORT: 

3/lR 

ITEM: 

CONTROLLER,  REMOTE 

POWER 

FAILURE  MODE 

: FAILS  OPEN 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL; 

3/lR 

ONORBIT: 

3/2R 

AO  A: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, PCA  3;  AV 

BAY 

5.  PCA  2 

PART  NUMBER:  56V76A133RPC35;  55V76A132RPC42 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  VALVE  HE  ISOL  A CLOSE  CMD.  VALVE 
CAN  STILL  BE  FULLY  OPERATED  BY  GPC.  FOR  LOSS  OF  ALL  REDUNDANCY 
THE  EFFECTS  WOULD  BE  THE  SAME  AS  HE  ISOL  A & B FAILING  CLOSED 
RESULTING  IN  AN  INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-288 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/lR 
3/lR 

ITEM:  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/12/87 

OMS 

387 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/lR 

TAL; 

3/lR 

ONORBIT; 

3/lR 

AO  A: 

3/lR 

DEORBIT; 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 

PART  NUMBER;  56V76A133RPC35;  55V76A132RPC42 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  HE  ISOL  A VALVE  FAILED  OPEN,  NO  EFFECT 
ON  MISSION.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF 
PROP  TANKS  OR  LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GND 
CREW. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-289 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  388 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/lR 

3/lR 


ITEM;  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE:  FAILS  OPEN  (NO  OUTPUT) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/lR 

DEORBIT; 
LANDING/ SAFING; 

3/lR 

3/3 

ATO: 

3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 

PART  NUMBER:  55V76A132RPC37,  56V76A133RPC30 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  HE  ISOL  B VALVE.  VALVE  CAN  STILL  BE 
FULLY  OPERATED  USING  SWITCH.  LOSS  OF  ALL  REDUNDANCY  WOULD  BE  THE 
SAME  AS  HE  ISOL  A & B FAILING  CLOSED  RESULTING  IN  AN  INABILITY  TO 
USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-290 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  389 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/lR 

TAL: 

3/lR 

ONORBIT; 

3/lR 

AOA: 

3/lR 

DEORBIT; 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 

PART  NUMBER:  55V76A132RPC37,  56V76A133RPC30 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  HE  ISOL  VALVE  B FAILED  OPEN,  NO  EFFECT 
ON  MISSION.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF 
PROP  TANKS  OR  LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GND 
CREW. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-291 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/12/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/lR 

MDAC  ID: 

390 

ABORT: 

3/lR 

ITEM: 

CONTROLLER,  REMOTE 

POWER 

FAILURE  MODE 

: FAILS  OPEN 

LEAD  ANALYST 

':  V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 
LANDING/ SAFING: 

3/lR 

3/3 

ATO: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 

PART  NUMBER:  56V76A133RPC32,  55V76A132RPC39 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  HE  ISOL  B VALVE  CLOSE  CMD.  VALVE 
CAN  STILL  BE  FULLY  OPERATED  BY  GPC.  FOR  LOSS  OF  ALL  REDUNDANCY 
THE  EFFECT  WOULD  BE  THE  SAME  AS  HE  ISOL  B VALVE  FAILED  CLOSE 
RESULTING  IN  INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12 ; MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-292 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM;  OMS 
MDAC  ID;  391 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/lR 

3/lR 


ITEM;  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE;  FAILS  HIGH 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF; 

3/lR 

TAL; 

3/lR 

ONORBIT: 

3/lR 

AOA: 

3/lR 

DEORBIT; 

3/lR 

ATO; 

3/lR 

LANDING/SAFING 

: 3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

6,  PCA  3;  AV 

BAY  5,  PCA  2 

PART  NUMBER;  56V76A133RPC32,  55V76A132RPC39 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  HE  ISOL  VALVE  B FAILED  OPEN,  NO  EFFECT 
ON  MISSION.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF 
PROP  TANKS  OR  LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GND 
CREW. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-293 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID; 


1/12/87 

OMS 

392 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


ITEM;  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE:  FAILS  OPEN  (LOSS  OF  OUTPUT) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1 VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/lR 

3/2R 

TAL: 

3/lR 

3/2R 

AOA: 

3/lR 

3/lR 

ATO: 

3/lR 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] C [ P ] 


LOCATION:  AV  BAY  4,  PCA  1 

PART  NUMBER:  54V76A131RPC36;  131RPC34 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  VAPOR  ISOL  VALVE  1.  VALVE  CAN  STILL 
BE  FULLY  OPERATED  BY  CREW  SWITCH  A OR  B.  LOSS  OF  ALL  REDUNDANCY 
SAME  AS  VAPOR  ISOL  1 & 2 VALVE  FAILED  CLOSE  RESULTING  IN  AN 
INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS 
POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-294 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  393 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D. J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1 VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/lR 

3/lR 

3/lR 

3/lR 

3/lR 


RTLS; 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


LOCATION:  AV  BAY  4,  PCA  1 

PART  NUMBER:  54V76A131RPC36;  131RPC34 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  VAPOR  ISOL  1 VALVE  FAILED  OPEN,  NO 
EFFECT  ON  MISSION.  LOSS  OF  ALL  REDUNDANCY  (IN  ANY  PHASE)  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  MIXING  OF  PROP  OR  PROP 
VAPORS  IN  HELIUM  LINES  RESULTING  IN  POSSIBLE  EXPLOSION  AND 
RUPTURE  OF  LINES. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-295 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  394 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


CONTROLLER,  REMOTE  POWER 
FAILURE  MODE:  FAILS  OPEN  (LOSS  OF  OUTPUT) 


HDW/FUNC 

3/lR 

3/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1 VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


LOCATION: 
PART  NUMBER: 


AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 
56V76A133RPC34;  132RPC41 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

MANUALLY  SELECT  VAPOR  ISOL  VALVE  1 OPEN. 
VALVE  IS  STILL  FULLY  OPERATIONAL  BY  GPC  CMD.  LOSS  OF  ALL 
REDUNDANCY  SAME  AS  VAPOR  ISOL  1 & 2 VALVE  FAILING  CLOSED 

^ INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PrSpER^S  CONST^Sts!"  STRUCTURAL  AND  ORBITER  MASS 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-296 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  395 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/lR 

3/lR 


ITEM;  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE;  FAILS  HIGH 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1 VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/lR 

RTLS: 

3/lR 

LIFTOFF; 

3/lR 

TAL; 

3/lR 

ONORBIT; 

3/lR 

AO  A: 

3/lR 

DEORBIT; 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 

PART  NUMBER;  56V76A133RPC34;  132RPC41 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  VAPOR  ISOL  1 VALVE  FAILED  OPEN,  NO 
EFFECT  ON  MISSION.  LOSS  OF  ALL  REDUNDANCY  (IN  ANY  PHASE)  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  MIXING  OF  PROP  OR  PROP 
VAPORS  IN  HELIUM  LINES  RESULTING  IN  POSSIBLE  EXPLOSION  AND 
RUPTURE  OF  LINES. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-297 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  396 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  CONTROLLER,  REMOTE  POWER" 

FAILURE  MODE:  FAILS  OPEN  (LOSS  OF  OUTPUT) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  2 VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

LANDING/SAFING: 

3/lR 

3/3 

ATO: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 

PART  NUMBER:  55V76A132RPC38 ; 133RPC31 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  VAPOR  ISOL  VALVE  1.  VALVE  CAN  STILL 
BE  FULLY  OPERATED  BY  CREW  SWITCH  A OR  B.  LOSS  OF  ALL  REDUNDANCY 
SAME  AS  VAPOR  ISOL  1 & 2 VALVES  FAILED  CLOSED  RESULTING  IN  AN 
INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS 
POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-298 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  397 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  CONTROLLER,  REMOTE  POWER” 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  2 VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 

REDUNDANCY  SCREENS: 


LOCATION: 
PART  NUMBER: 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/lR 

RTLS: 

3/lR 

3/lR 

TAL: 

3/lR 

3/lR 

AOA: 

3/lR 

3/lR 

3/lR 

ATO: 

3/lR 

A [ 2 ] 

B [ P ] 

C [ P ] 

, PCA  2;  AV 

BAY  6,  PCA  3 

55V76A132RPC38;  133RPC31 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  VAPOR  ISOL  2 VALVE  FAILED  OPEN,  NO 
EFFECT  ON  MISSION.  LOSS  OF  ALL  REDUNDANCY  (IN  ANY  PHASE)  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  MIXING  OF  PROP  OR  PROP 
VAPORS  IN  HELIUM  LINES  RESULTING  IN  POSSIBLE  EXPLOSION  AND 
RUPTURE  OF  LINES. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-299 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/12/87 

OMS 

398 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  CONTROLLER,  REMOTE  POWER" 

FAILURE  MODE:  FAILS  OPEN  (LOSS  OF  OUTPUT) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  2 VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/lR 

LIFTOFF: 

3/2R 

TAL; 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT; 

3/lR 

ATO: 

3/lR 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, PCA  3;  AV 

BAY 

5,  PCA  2 

PART  NUMBER:  56V76A133RPC33;  132RPC40 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  MANUALLY  OPEN  VAPOR  ISOL  VALVE  2.  VALVE  CAN 
STILL  BE  FULLY  OPERATED  BY  GPC  CMDS.  LOSS  OF  ALL  REDUNDANCY  SAME 
AS  VAPOR  ISOL  1 & 2 VALVES  FAILED  CLOSED  RESULTING  IN  AN 
INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS 
POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES:  VS70-943099  REV  A EO  B12 ; MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-300 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/12/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/lR 

MDAC  ID:  399  ABORT:  3/lR 

ITEM:  CONTROLLER,  REMOTE  POWER” 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  2 VLVS 

5)  CONTROLLER,  REMOTE  POWER 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/lR 

TAL: 

3/lR 

ONORBIT: 

3/lR 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/lR 
A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 

PART  NUMBER:  56V76A133RPC33 ; 132RPC40 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  VAPOR  ISOL  2 VALVE  FAILED  OPEN,  NO 
EFFECT  ON  MISSION.  LOSS  OF  ALL  REDUNDANCY  (IN  ANY  PHASE)  IS 
POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DUE  TO  MIXING  OF  PROP  OR  PROP 
VAPORS  IN  HELIUM  LINES  RESULTING  IN  POSSIBLE  EXPLOSION  AND 
RUPTURE  OF  LINES. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-301 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM;  OMS 
MDAC  ID;  400 


ITEM;  DIODE 

FAILURE  MODE;  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

HDW/FUNC 

3/3 

3/2R 

3/2R 

3/lR 

3/3 

ABORT 

RTLS; 

TAL; 

AOA; 

ATO; 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] B 

[ P ] 

C [ P ] 

LOCATION;  AV  BAY  4,  PCA  1 

PART  NUMBER;  54V76A131A3CR16;  A1CR14 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  CAPABILITY  TO  OVERRIDE  GNC  HE  ISOL  A CLOSE  CMD.  VALVE  CAN 
STILL  BE  FULLY  OPERATED  BY  GPC.  FOR  LOSS  OF  ALL  REDUNDANCY  THE 
EFFECTS  WOULD  BE  THE  SAME  AS  HE  ISOL  A & B FAILING  CLOSED 
RESULTING  IN  AN  INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-302 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  401 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

4,  PCA  1 

PART  NUMBER:  54V76A131A3CR16;  A1CR14 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  OVERRIDE  GNC  HE  ISOL  A CLOSE  CMD.  VALVE  CAN 
STILL  BE  FULLY  OPERATED  BY  GPC.  FOR  LOSS  OF  ALL  REDUNDANCY  THE 
EFFECTS  WOULD  BE  THE  SAME  AS  HE  ISOL  A & B FAILING  CLOSED 
RESULTING  IN  AN  INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-303 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM;  OMS 
MDAC  ID;  402 


ITEM;  DIODE 

FAILURE  MODE;  FAILS  OPEN 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/lR 

3/lR 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL; 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/lR 

ATO; 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


LOCATION;  AV  BAY  4,  PCA  1 

PART  NUMBER;  54V76A131A3CR15;  A1CR13 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  HE  ISOL  A VALVE.  VALVE  CAN  STILL  BE 
FULLY  OPERATED  USING  SWITCH.  LOSS  OF  ALL  REDUNDANCY  WOULD  BE  THE 
SAME  AS  HE  ISOL  A & B FAILING  CLOSED  RESULTING  IN  AN  INABILITY  TO 
USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC62 1-0059  REV  E 


REPORT  DATE  02/04/87 


C-304 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/12/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  OMS  FLIGHT;  3/lR 

MDAC  ID;  403  ABORT;  3/lR 

ITEM:  DIODE 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/lR 

LIFTOFF; 

3/2R 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/lR 

DEORBIT; 

3/lR 

ATO; 

3/2R 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 

LOCATION;  AV  BAY  4,  PCA  1 

PART  NUMBER;  54V76A131A3CR15;  A1CR13 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  HE  ISOL  A VALVE.  VALVE  CAN  STILL  BE 
FULLY  OPERATED  USING  SWITCH.  LOSS  OF  ALL  REDUNDANCY  WOULD  BE  THE 
SAME  AS  HE  ISOL  A & B FAILING  CLOSED  RESULTING  IN  AN  INABILITY  TO 
USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-305 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/12/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/lR 

MDAC  ID: 

404 

ABORT: 

3/lR 

ITEM: 

DIODE 

FAILURE  MODE 

1:  FAILS  OPEN 

LEAD  ANALYST 

':  V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/SAFING ; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

C P ] 

C [ P ] 

LOCATION:  AV  BAY  5 

, PCA  2; 

AV  BAY 

6,  PCA  3 

PART  NUMBER:  55V76A132A2CR12, 

56V76A133A3CR4 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  HE  ISOL  B VALVE  CLOSE  CMD.  VALVE 
CAN  STILL  BE  FULLY  OPERATED  BY  GPC.  FOR  LOSS  OF  ALL  REDUNDANCY 
THE  EFFECTS  WOULD  BE  THE  SAME  AS  HE  ISOL  A & B VALVE  FAILED  CLOSE 
RESULTING  IN  INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-306 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE!  1/12/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT: 

MDAC  ID:  405  ABORT:  3/lR 

ITEM:  DIODE 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AO  A: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 

PART  NUMBER:  55V76A132A2CR12,  56V76A133A3CR4 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS /RATIONALE : 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  HE  ISOL  B VALVE  CLOSE  CMD.  VALVE 
CAN  STILL  BE  FULLY  OPERATED  BY  GPC.  FOR  LOSS  OF  ALL  REDUNDANCY 
THE  EFFECTS  WOULD  BE  THE  SAME  AS  HE  ISOL  A & B VALVE  FAILED  CLOSE 
RESULTING  IN  INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-307 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  406 

ITEM:  DIODE 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS: 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


REDUNDANCY  SCREENS:  A [ 2 ] 


LOCATION: 
PART  NUMBER: 


AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 
55V76A132A2CR4;  56V76A133A3CR3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION, 

SHOCK,  OVERLOAD 


MECHANICAL  SHOCK, 


THERMAL 


EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  HE  ISOL  B VALVE.  VALVE  CAN  STILT  RF 

SaS^AS^HE*tsot^a\^r  REDUNDANCY  WOULD  BE  THE 

ISOL  A & B FAILING  CLOSED  RESULTING  IN  AN  INABILITY  TO 

PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-308 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/12/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/lR 

MDAC  ID:  407  ABORT:  3/lR 

ITEM:  DIODE 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 

PART  NUMBER:  55V76A132A2CR4;  56V76A133A3CR3 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  HE  ISOL  B VALVE.  VALVE  CAN  STILL  BE 
FULLY  OPERATED  USING  SWITCH.  LOSS  OF  ALL  REDUNDANCY  WOULD  BE  THE 
SAME  AS  HE  ISOL  A & B FAILING  CLOSED  RESULTING  IN  AN  INABILITY  TO 
USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-309 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  408 


ITEM;  DIODE 

FAILURE  MODE;  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1 VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/lR 

3/2R 

TAL; 

3/lR 

3/2R 

AOA: 

3/lR 

3/lR 

ATO; 

3/lR 

3/3 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  4,  PCA  1 

PART  NUMBER;  54V76A131A3CR13;  131A2CR11 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  GPC  CAPABILITY  TO  OPEN  VAPOR  ISOL  VALVE  1.  VALVE  CAN  STILL 
BE  FULLY  OPERATED  BY  CREW  SWITCH  A OR  B.  LOSS  OF  ALL  REDUNDANCY 
SAME  AS  VAPOR  ISOL  1 & 2 VALVE  FAILED  CLOSE  RESULTING  IN  AN 
INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS 
POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-310 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM;  OMS 
MDAC  ID;  409 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/lR 

3/lR 


ITEM;  DIODE 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1 VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/lR 

LIFTOFF; 

3/2R 

TAL; 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B C P ] 

C [ P ] 

LOCATION;  AV  BAY  4,  PCA  1 

PART  NUMBER;  54V76A131A3CR13 ; 131A2CR11 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSE  GPC  CAPABILITY  TO  OPEN  VAPOR  ISOL  VALVE  1.  VALVE  CAN  STILL 
BE  FULLY  OPERATED  BY  CREW  SWITCH  A OR  B.  LOSS  OF  ALL  REDUNDANCY 
SAME  AS  VAPOR  ISOL  1 & 2 VALVE  FAILED  CLOSE  RESULTING  IN  AN 
INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS 
POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


C ~ S 


REPORT  DATE  02/04/87 


C-311 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID;  410 


ITEM;  DIODE 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRE LAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/lR 

ATO; 

LANDING/SAFING ; 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 

LOCATION;  AV  BAY  6,  PCA  3;AV  BAY  5,  PCA  2 

PART  NUMBER:  56V76A133A1CR5;  55V76A132A1CR5 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


CAUSES:  CONTAJJINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  OPEN  OX  VAPOR  ISOL  VALVES  1 & 2 UTILIZING  HE 
PRESS/ VAPOR  ISOL  SWITCH  B.  VALVES  STILL  FULLY  OPERATIONAL  USING 
SWITCH  A OR  GPC  CMDS.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  VAPOR 
ISOL  VALVES  1 & 2 FAILED  CLOSED  RESULTING  IN  SUBSEQUENT  INABILITY 
TO  USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE 
VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG 
CONSTRAINTS . 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-312 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  411 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/2R 

3/2R 

3/lR 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


LOCATION:  AV  BAY  6,  PCA  3 ;AV  BAY  5,  PCA  2 

PART  NUMBER:  56V76A13 3A1CR5 ; 55V76A132A1CR5 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


HE  PRESS/VAPOB  ISOL  SWITCHES  AS  B TO  OPEN 
VAPOR  ISOL  1 & 2 VALVES.  GPC  CMD  OF  ALL  VALVES  ILL  FULLY 
OPERATIONAL  LOSS  OF  ALL  REDUNDANCY  IS  THE  SAME  AS  VAPOR  ISOL 
f 2^IlVES  FAI^^^  CLOSED  RESULTING  IN  AN  INABILITY  TO  USE/DEPLETE 
PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP 
T^K  SECTORAL  AND  ORBITAL  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-313 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  412 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  OPEN  (LOSS  OF  OUTPUT) 


HDW/FUNC 

3/lR 

3/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS: 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B 

LOCATION:  AV  BAY  4,  PCA  1 

PART  NUMBER:  54V76A131A3CR14;  A2CR12 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


CAUSES:  CONTAMINATION, 

SHOCK,  OVERLOAD 


VIBRATION,  MECHANICAL 


SHOCK,  THERMAL 


EFFECTS/RATIONALE : 


REFERENCES: 


VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-314 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  413 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM: 

FAILURE  MODE: 
LEAD  ANALYST: 


DIODE 

FAILS  SHORT 
V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/2R 

3/2R 

3/lR 

3/3 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


LOCATION:  AV  BAY  4,  PCA  1 

PART  NUMBER:  54V76A131A3CR14 ; A2CR12 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  CAPABILITY  TO  MANUALLY  SELECT  VAPOR  ISOL  VALVE  1 OPEN. 
VALVE  IS  STILL  FULLY  OPERATIONAL  BY  GPC  CMD.  LOSS  OF  ALL 
REDUNDANCY  SAME  AS  VAPOR  ISOL  1 & 2 VALVE  FAILING  CLOSED 
RESULTING  IN  AN  INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-315 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  414 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL; 

3/2R 

AOA: 

3/lR 

ATO; 

3/3 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


LOCATION: 
PART  NUMBER; 


AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 
56V76A133A1CR6;  55V76A132A1CR6 


C 


P ] 


VIBRATION,  MECHANICAL  SHOCK, 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE : 

VAPOR  ISOL  VALVES  1 & 2 UTILIZING  HE 

SWITCH  B OR  GPC^pm!?J'^^”t/?cc  OPERATIONAL  USING 

SWITCH  B OR  GPC  CMOS,  LOSS  OF  ALL  REDUNDANCY  IS  THE  SAME  AS 

VAPOR  ISOL  1 & 2 VALVES  FAILED  CLOSED  RESULTING  IN  AN  INABILITY 

PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE 

CoS^??Tsf  STRUCTURAL  AND  ORBITAL  MASS  PROPERTIES 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-316 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID;  415 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/lR 

3/lR 


ITEM;  DIODE 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  1/2  VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH : 3/3  RTLS : 

LIFTOFF:  3/2R  TAL: 

ONORBIT;  3/2R  AOA; 

DEORBIT;  3/lR  ATO: 

LANDING/ SAFING:  3/3 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 


LOCATION;  AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 

PART  NUMBER;  56V76A133A1CR6;  55V76A132A1CR6 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

POSSIBLE  LOSS  OF  BOTH  HE  PRESS/VAPOR  ISOL  SWITCHES  A & B TO  OPEN 
VAPOR  ISOL  1 & 2 VALVES.  GPC  CMD  OF  ALL  VALVES  STILL  FULLY 
OPERATIONAL.  LOSS  OF  ALL  REDUNDANCY  IS  THE  SAME  AS  VAPOR  ISOL  1 
& 2 VALVES  FAILED  CLOSED  RESULTING  IN  AN  INABILITY  TO  USE/DEPLETE 
PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP 
TANK  STRUCTURAL  AND  ORBITAL  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-317 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  416 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  OPEN  (LOSS  OF  OUTPUT) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  2 VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF;  3/2R  TAL: * 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/lR  ATO: 

LANDING/ SAFING;  3/3 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


REDUNDANCY  SCREENS:  A [ 3 ] 


B [ P ] 


LOCATION: 
PART  NUMBER; 


AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 
55V76A132A2CR3;  133A2CR6 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  VAPOR  ISOL  VALVE  2.  VALVE  CAN  STILL 
BE  FULLY  OPERATED  BY  CREW  SWITCH  A OR  B.  LOSS  OF  ALL  REDUNdIJcY 
SAME  AS  VAPOR  ISOL  1 & 2 VALVES  FAILED  CLOSED  RESULTING  IN  AN 
INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS 
TOSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-318 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  417 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  2 VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

5,  PCA  2;  AV 

BAY  6,  PCA  3 

PART  NUMBER:  55V76A132A2CR3 ; 133A2CR6 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  VAPOR  ISOL  VALVE  2.  VALVE  CAN  STILL 
BE  FULLY  OPERATED  BY  CREW  WITH  SWITCH  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  SAME  AS  VAPOR  ISOL  1 & 2 VALVES  FAILED  CLOSED 
RESULTING  IN  AN  INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  MASS 
PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-319 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  418 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  OPEN  (LOSS  OF  OUTPUT) 


HDW/FUNC 

3/lR 

3/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  2 VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


REDUNDANCY  SCREENS:  A [ 3 ] 


LOCATION: 
PART  NUMBER: 


AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 
55V76A132A2CR11;  56V76A133A2CR14 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION, 

SHOCK,  OVERLOAD 


MECHANICAL  SHOCK, 


THERMAL 


EFFECTS/RATIONALE : 

MANUALLY  OPEN  VAPOR  ISOL  VALVE  2.  VALVE  CAN 
STILL  BE  FULLY  OPERATED  BY  GPC  CMDS.  LOSS  OF  ATT.  REDUNDANCY  SAME 
AS  VAPOR  ISOL  1 fit  2 VALVES  FAILED  CLOSED  RESULTING  IN  AN 
INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS 

structural  and  iXls^PEMIES 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-320 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


1/12/87 

OMS 

419 


ITEM;  DIODE 

FAILURE  MODE;  FAILS  SHORT 

LEAD  ANALYST;  V.J.  BURKEMPER 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  VAPOR  ISOL  2 VLVS 

5)  DIODE 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


SUBSYS  LEAD;  D.J.  PAUL 


CRITICALITIES 


FLIGHT  PHASE  ] 

PRELAUNCH; 
LIFTOFF; 
ONORBIT; 

DEORBIT; 

LANDING/SAFING; 

REDUNDANCY  SCREENS; 


HDW/FUNC 

3/3 

3/2R 

3/2R 

3/lR 


A [ 3 ] 


ABORT 

RTLS: 

TAL; 

AOA; 

ATO; 


B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


LOCATION;  AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 

PART  NUMBER;  55V76A132A2CR11;  56V76A133A2CR14 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE; 

LOSE  CAPABILITY  TO  MANUALLY  OPEN  VAPOR  ISOL  VALVE  2.  VALVE  CAN 
STILL  BE  FULLY  OPERATED  BY  GPC  CMDS.  LOSS  OF  ALL  REDUNDANCY  SAME 
AS  VAPOR  ISOL  1 & 2 VALVES  FAILED  CLOSED  RESULTING  IN  AN 
INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS 
POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  MASS  PROPERTIES 
CONSTRAINTS . 


REFERENCES;  VS70-943099  REV  A EO  B12 ; MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-321 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/12/87 

OMS 

420 


ITEM:  DRIVER,  HYBRID 

FAILXJRE  MODE:  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS 

: 3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  LCA  1 

PART  NUMBER;  54V76A121AR  J8-33 

TYPE  1;  J8-23 

TYPE  I 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  GPC  CAPABILITY  TO  OPEN  HE  ISOL  A VALVE.  VALVE  CAN  STILL  BE 
FULLY  OPERATED  USING  SWITCH.  LOSS  OF  ALL  REDUNDANCY  WOULD  BE 
THE  SAME  AS  HE  ISOL  A & B FAILING  CLOSED  RESULTING  IN  AN 
INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS 
POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG 
CONSTRAINTS . 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-322 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  421 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/lR 

TAL: 

3/lR 

ONORBIT: 

3/lR 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  LCA  1 

PART  NUMBER:  54V76A121AR  J8-33  TYPE  1;  J8-23  TYPE  I 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  HE  ISOL  A VALVE  FAILED  OPEN,  NO  EFFECT 
ON  MISSION.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF 
PROP  TANKS  OR  LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GND 
CREW. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-323 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM;  OMS 
MDAC  ID;  422 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/lR 

2/lR 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  OPEN  (NO  OUTPUT) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/lR 

3/2R 

TAL: 

3/lR 

3/2R 

AOA: 

3/lR 

3/lR 

3/3 

ATO: 

3/lR 

A [ 2 3 

B [ P ] 

C [ P 3 

LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER;  55V76A122AR  J8-23  TYPE  1;  123AR  J8-23  (128)  TYPE  1 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  GPC  CAPABILITY  TO  OPEN  HE  ISOL  B VALVE.  VALVE  CAN  STILL  BE 
FULLY  OPERATED  USING  SWITCH.  LOSS  OF  ALL  REDUNDANCY  WOULD  BE  THE 
SAME  AS  HE  ISOL  A & B FAILING  CLOSED  RESULTING  IN  AN  INABILITY  TO 
USE/DEPLETE  PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION 
OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-324 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/12/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  OMS  FLIGHT;  3/lR 

MDAC  ID;  423  ABORT;  3/lR 

ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/lR 

RTLS; 

3/lR 

LIFTOFF; 

3/lR 

TAL; 

3/lR 

ONORBIT; 

3/lR 

AOA; 

3/lR 

DEORBIT; 

3/lR 

ATO; 

3/lR 

LANDING/SAFING; 

3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER;  55V76A122AR  J8-23  TYPE  1;  123AR  J8-23  (128)  TYPE  1 
CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  HE  ISOL  VALVE  B FAILED  OPEN,  NO  EFFECT 
ON  MISSION.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF 
PROP  TANKS  OR  LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GND 
CREW. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-325 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  424 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  FUSE,  lA 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS  & VAPOR  ISOL  1/2  VLVS 

5)  FUSE,  lA 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/lR 

TAL: 

3/lR 

ONORBIT; 

3/lR 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING; 

3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  08,  S12;  S14 

PART  NUMBER;  33V73A8F34;  F3 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  HE  ISOL  & VAPOR  ISOL  A VALVE 
CMDS.  VALVE  CAN  STILL  BE  FULLY  OPERATED  BY  GPC.  FOR  LOSS  OF  ALL 
REDUNDANCY  WORST  CASE  RESULTS  IN  HE  ISOL  A & B,  AND  VAPOR  ISOL 
1 & 2 VALVES  FAILED  OPEN.  THE  RESULT  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF 
PROP  TANKS  AND  LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GND 
CREW. 


REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  E EO  G14 


REPORT  DATE  02/04/87 


C-326 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  425 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM;  FUSE,  lA 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS  & VAPOR  ISOL  1/2  VLVS 

5)  FUSE,  lA 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/lR 

TAL: 

3/lR 

ONORBIT: 

3/lR 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  08, 

S13;  S15 

PART  NUMBER:  33V73A8F21;  F22 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  HE  ISOL  & VAPOR  ISOL  B VALVE 
CMDS.  VALVE  CAN  STILL  BE  FULLY  OPERATED  BY  GPC.  FOR  LOSS  OF  ALL 
REDUNDANCY  WORST  CASE  RESULTS  IN  HE  ISOL  A 4 B,  AND  VAPOR  ISOL 
1 & 2 FAILED  OPEN.  THE  RESULT  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  OVERPRESSXJRIZATION  AND  POSSIBLE  RUPTURE  OF  PROP  TANKS  AND 
LINES,  FIRE/EXPLOSION  HAZARD,  AND  HAZARD  TO  GND  CREW. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-327 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  426 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION:  AV  BAY  4,  LCA  1 

PART  NUMBER:  54V76A121  J8-29;  J8-43 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  VALVE  TALKBACK  RESULTS  IN  LT/RT  HE  VAPOR  ISOL  VALVE 
MISCOMPARE,  V90X8274X/V90X8275X  CREW  ALERT  (CLASS  3)  AT  TIG. 

THE  CREW  WILL  RESPOND  BY  PLACING  THE  APPROPRIATE  HE  PRESS/VAPOR 
ISOL  SWITCH  TO  THE  OPEN  POSITION,  ALERT  WILL  CONTINUE  AND  THE 
BURN  WILL  CONTINUE  AS  PLANNED  WITH  ASSOCIATED  VALVES  SUSPECT. 


REFERENCES:  SEQ  FSSR  STS  81-0026,  CR29378A 


REPORT  DATE  02/04/87 


C-328 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/12/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  427  ABORT:  3/3 

ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  4,  LCA  1 

PART  NUMBER:  54V76A121  J8-29;  J8-43 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  TALKBACK  TO  GPC  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-329 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/12/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  428  ABORT:  3/3 

ITEM:  RESISTOR,  5.1K  1/4W 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  4,  LCA  1 

PART  NUMBER:  54V76A121  J2-10;  54V76A121  J2-2 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  TALKBACK  V43S4184E  FOR  HE  PRESS/VAPOR  ISOL  SWITCH  A IN  CLOSE 
POSITION.  SWITCH  OPERATION  CAN  BE  DETERMINED  FROM  HE  ISOL  VALVE 
TALKBACK  V43X4152X. 

FOR  LOSS  OF  ALL  REDUNDANCY  SWITCH  A & B OPERATION  CAN  BE 
DETERMINED  FROM  VALVE  TALKBACKS. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-330 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/12/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM:  OMS 

FLIGHT: 

3/3 

MDAC  ID:  429 

ABORT: 

3/3 

ITEM: 

RESISTOR,  5.  IK 

1/4W 

FAILURE  MODE: 

FAILS  SHORT 

LEAD  ANALYST: 

V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS 

: 3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A 

c 

] 

B [ 

] 

c [ ] 

LOCATION:  AV  BAY  4, 

LCA 

1 

PART  NUMBER:  54V76A121 

J2-: 

10; 

54V76A121 

J2-2 

CAUSES : CONTAM INATION , 

VIBRATION,  MECHANICAL 

SHOCK,  THERMAL 

SHOCK,  OVERLOAD 
EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  TO  GPC  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-331 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  430 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS  & VAPOR  ISOL  1/2  VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 

PART  NUMBER:  56V76A133A1R28;  132A1R34 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  TALKBACK  V43S4186E  FOR  HE  PRESS/VAPOR  ISOL  SWITCH  A IN  OPEN 
POSITION.  SWITCH  OPERATION  CAN  BE  DETERMINED  FROM  HE  ISOL  AND 
VAPOR  ISOL  VALVE  TALKBACKS  V43X4152X  & V43X4156X. 

FOR  LOSS  OF  ALL  REDUNDANCY  SWITCH  A OR  B OPERATION  CAN  BE 
DETERMINED  FROM  VALVE  TALKBACKS. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-332 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  431 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  A VLVS  & VAPOR  ISOL  1/2  VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS: 

LIFTOFF;  3/3  TAL: 

ONORBIT;  3/3  AOA: 

DEORBIT;  3/3  ATO: 

LANDING/ SAFING:  3/3 


REDUNDANCY  SCREENS;  A [ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION;  AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 

PART  NUMBER:  56V76A133A1R28;  132A1R34 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  SWITCH  TALKBACK  TO  GPC  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-333 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  432 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE;  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS; 

TAL; 

AOA: 

ATO; 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] B [ ] 

LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122  J8-29;  56V76A123  J8-29 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  VALVE  TALKBACK  RESULTS  IN  LT/RT  HE  VAPOR  ISOL  VALVE 
MISCOMPARE,  V90X8274X/V90X8275X  CREW  ALERT  (CLASS  3)  AT  TIG. 

THE  CREW  WILL  RESPOND  BY  PLACING  THE  APPROPRIATE  HE  PRESS/ VAPOR 
ISOL  SWITCH  TO  THE  OPEN  POSITION,  ALERT  WILL  CONTINUE  AND  THE 
BURN  WILL  CONTINUE  AS  PLANNED  WITH  VALVES  SUSPECT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  SEQ  FSSR  STS  81-0026, 
CR29378A 


REPORT  DATE  02/04/87 


C-334 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  433 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122  J8-29;  56V76A123  J8-29 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  TALKBACK  TO  GPC  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-335 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/3 
3/3 

ITEM;  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


1/12/87 

OMS 

434 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE  LAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS;  A [ ].  B [ ] C [ ] 

LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER;  55V76A122  J2-2;  56V76A123  J2-2 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSE  TALKBACK  V43S4185E  FOR  HE  PRESS/VAPOR  ISOL  SWITCH  A IN  CLOSE 
POSITION.  SWITCH  OPERATION  CAN  BE  DETERMINED  FROM  HE  ISOL  VALVE 
TALKBACK  V43X4154X. 

FOR  LOSS  OF  ALL  REDUNDANCY  SWITCH  A & B OPERATION  CAN  BE 
DETERMINED  FROM  VALVE  TALKBACKS. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-336 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  435 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM;  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122  J2-2;  56V76A123  J2-2 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  TALKBACK  TO  GPC  STILL  AVAILABLE. 


REFERENCES; 


VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-337 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/12/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM:  OMS 

FLIGHT; 

3/3 

MDAC  ID:  436 

ABORT: 

3/3 

ITEM; 

RESISTOR,  5.  IK 

1/4W 

FAILURE  MODE; 

FAILS  OPEN 

LEAD  ANALYST; 

V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS  & VAPOR  ISOL  1/2  VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT; 
LANDING/ SAFING; 

3/3 

3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ 3 

c [ ] 

LOCATION:  AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 

PART  NUMBER:  56V76A133A1R25;  132A1R33 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  TALKBACK  V43S4187E  FOR  HE  PRESS/VAPOR  ISOL  SWITCH  B IN  OPEN 
POSITION.  SWITCH  OPERATION  CAN  BE  DETERMINED  FROM  HE  ISOL  AND 
VAPOR  ISOL  VALVE  TALKBACKS  V43X4154X  & V43X4158X. 

FOR  LOSS  OF  ALL  REDUNDANCY  SWITCH  A OR  B OPERATION  CAN  BE 
DETERMINED  FROM  VALVE  TALKBACKS. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-338 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  437 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  ISOL  B VLVS  & VAPOR  ISOL  1/2  VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF: 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION;  AV  BAY  6,  PCA  3;  AV  BAY  5,  PCA  2 

PART  NUMBER:  56V76A133A1R25;  132A1R33 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  TALKBACK  TO  GPC  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-339 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  438 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV  A 

failure  MODE:  FAILS  TO  SWITCH  (STUCK  IN  THE  OPEN  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  PRESS  ISOL  A VLVS  AND  OX  TK  VAPOR  ISOL  A&B  VLVS 

5)  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV  A 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 

3/lR 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  PNL  08 

PART  NUMBER:  33V73A8-S12  ; S14 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FAILURE  RESULTS  IN  THE  HE  ISOL  A & VAPOR  ISOL  A&B  VALVE  STUCK  IN 
OPEN  POSITION.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE 
RUPTURE  OF  PROP  TANKS  AND  LINES,  FIRE/EXPLOSION  HAZARD,  AND 
HAZARD  TO  GND  CREW. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-340 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  439 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM'  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV  A 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  THE  CLOSE  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  PRESS  ISOL  A VLVS  AND  OX  TK  VAPOR  ISOL  A&B  VLVS 

5)  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VALVE  A 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  08 

PART  NUMBER:  33V73A8- 

-S12  ; S14 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FAILURE  RESULT  IN  TANK  ISOL  A VALVE  STUCK  IN  CLOSED  POSITION. 
RESULTING  IN  ONE  FAILURE  (REDUNDANT  ISOL  VALVE  FAILS  TO  OPEN) 
AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO  LOSS 
OF  PRESSURIZATION  SOURCE  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE 
PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP 
TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-341 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  440 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

2/lR 


ITEM: 

FAILURE  MODE: 


SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV  A 
FAILS  TO  SWITCH  (STUCK  IN  THE  GPC  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  PRESS  ISOL  A VLVS  AND  OX  TK  VAPOR  ISOL  A&B  VLVS 

5)  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VALVE  A 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 

HDW/FUNC 

3/3 

3/2R 

3/2R 

2/lR 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  PNL  08 

PART  NUMBER:  33V73A8-S12  ; S14 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE: 

iSSf  CAPABILITY  TO  OVERRIDE  GPC  HE  ISOL  A & VAPOR  ISOL  A&B  VALVE 
CMDS.  VALVE  CAN  STILL  BE  FULLY  OPERATED  BY  GPC.  FOR  LOSS  OF  ALL 
REDUNDANCY  WORST  CASE  IS  THE  SAME  AS  THE  HE  ISOL  A VLV  FAILED 
CLOSED.  RESULTING  IN  ONE  FAILURE  AWAY  FROM  POSSIBLE  LOSS  OF 

DURING  ENTRY  DUE  TO  LOSS  OF  PRESSURIZATION  SOURCE 
AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-342 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  441 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

2/lR 


ITEM:  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV  B 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  THE  CLOSE  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  PRESS  ISOL  B VLVS  AND  OX  TK  VAPOR  ISOL  A&B  VLVS 

5)  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VALVE  B 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  08 

PART  NUMBER:  33V73A8-S13,  S15 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FAILURE  RESULTS  IN  TANK  ISOL  B VALVE  STUCK  IN  CLOSED  POSITON. 
RESULTING  IN  ONE  FAILURE  (REDUNDANT  ISOL  VALVE  FAILS  TO  OPEN) 
AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/ VEHICLE  DURING  ENTRY  DUE  TO  LOSS 
OF  PRESSURIZATION  SOURCE  AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE 
PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP 
TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12 ; MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-343 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  442 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV  B 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  THE  OPEN  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  PRESS  ISOL  B VLVS  AND  OX  TK  VAPOR  ISOL  A&B  VLVS 

5)  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VALVE  B 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/lR 

TAL: 

3/lR 

ONORBIT: 

3/lR 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  08 

PART  NUMBER:  33V73A8-S13,  S15 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  HE  ISOL  VALVE  B AND  BOTH  VAPOR  ISOL 
VALVES  FAILED  OPEN,  NO  MISSION  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DDE  TO  OVERPRESSURIZATION  AND 
POSSIBLE  RUPTURE  OF  PROP  TANKS  OR  LINES,  FIRE/EXPLOSION  HAZARD, 
AND  HAZARD  TO  GND  CREW. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-344 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/12/87 

SUBSYSTEM:  OMS 

MDAC  ID:  443 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

2/lR 

2/lR 


ITEM:  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VLV  B 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  THE  GPC  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  HE  PRESS  SUBSYSTEM 

4)  HE  PRESS  ISOL  B VLVS  AND  OX  TK  VAPOR  ISOL  A&B  VLVS 

5)  SWITCH  TOGGLE,  LT/RT  OMS  HE  PRESS  VAPOR  ISOL  VALVE  B 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL; 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT; 

2/lR 

ATO: 

2/lR 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  PNL  08 

PART  NUMBER:  33V73A8-S13,  S15 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  HE  ISOL  B & VAPOR  ISOL  A&B  VALVE 
CMDS.  VALVE  CAN  STILL  BE  FULLY  OPERATED  BY  GPC.  FOR  LOSS  OF  ALL 
REDUNDANCY  WORST  CASE  IS  THE  SAME  AS  THE  HE  ISOL  B VLV  FAILED 
CLOSED.  RESULTING  IN  ONE  FAILURE  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DURING  ENTRY  DUE  TO  LOSS  OF  PRESSURIZATION  SOURCE 
AND  SUBSEQUENT  INABILITY  TO  USE/DEPLETE  PROPELLANT.  TRAPPED 
PROPELLANT  IS  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-345 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

OMS 

444 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  METER,  OMS  PRESSURE  N2/HE  TK 

FAILURE  MODE:  ERRONEOUS  OUTPUT 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  HE  PRESS  SUBSYSTEM 

4)  METER,  OMS  PRESSURE  N2/HE  TANK 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B C P ] 

C [ P ] 

LOCATION:  PNL  F7A5  M2 

PART  NUMBER:  34V73A7A5-M2 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

GAGE  M2  PROVIDES  A FALSE  INDICATION  OF  LT/RT  HE  OR  N2  PRESSURE 
(ALSO  PAYLOAD  KIT  HE  PRESSURE).  THERE  ARE  STILL  TWO  OTHER 
REDUNDANT  MEASUREMENT  PATHS  AVAILABLE  FOR  EACH  LT/RT  HE  AND  N2 
PRESSURE  THROUGH  THE  GPC. 

IF  ALL  REDUNDANCY  IS  LOST  (FAILS  LOW  INDICATING  LOSS  OF  N2  OR  HE) 
THE  REAL  STATUS  OF  THE  OME  N2  TANK  WILL  BE  UNAVAILABLE  OR 
ERRONEOUS  INDICATION  (LOSS  OF  N2)  AND  CAN  RESULT  IN  FAILING  1 OMS 
HE  OR  2 OMS  GN2  TANKS  LEAKING/FAILED;  THEREFORE  MISSION 
CAPABILITIES  ARE  LOST  OR  ATO  COULD  BE  CALLED  (SEE  FLIGHT  RULE  6- 
1)  . 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-20923  PCN-1 


REPORT  DATE  02/04/87 


C-346 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

445 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  SENSOR  PRESSURE,  HE  TANK  NO.l 

FAILURE  MODE:  ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  HE  PRESS  SUBSYSTEM 

4)  SENSOR  PRESSURE,  HE  TANK  NO,l 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 


LOCATION:  HELIUM  TANK 

PART  NUMBER:  51V43PT401,  52V43PT501 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  UTILIZE  PT401/PT501  FOR  PRESSURE  MEASUREMENT 
OF  LT/RT  OMS  HE  TK.  A REDUNDANT  LT/RT  PRESSURE  MEASUREMENT  IS 
AVAILABLE  UTLIZING  PT402/PT502  MEASUREMENT  V43P4122C/V43P5122C. 
IF  ALL  REDUNDANCY  IS  LOST  (FAILS  LOW  INDICATING  LOSS  OF  HE)  THE 
REAL  STATUS  OF  THE  OMS  HE  TK  WILL  BE  UNAVAILABLE  OR  ERRONEOUS 
INDICATION  AND  CAN  RESULT  IN  FAILING  LT/RT  OMS  HE  TK  (SEE  FLIGHT 
RULE  6-1)  DURING  ASCENT  REQUIRING  AN  ATO  BE  CALLED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-347 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

446 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  SENSOR  PRESSURE,  HE  TANK  NO. 2 

FAIUJRE  MODE:  ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  HE  PRESS  SUBSYSTEM 

4)  SENSOR  PRESSURE,  HE  TANK  N0.2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING 

; 3/3 

REDUNDANCY  SCREENS; 

A [ 2 3 

B [ P ] 

C [ P ] 

LOCATION:  HELIUM 

TANK 

PART  NUMBER:  51V43PT402,  52V43PT502 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  UTILIZE  PT402/PT502  FOR  PRESSURE  MEASUREMENT 
OF  LT/RT  OMS  HE  TK.  A REDUNDANT  LT/RT  PRESSURE  MEASUREMENT  IS 
AVAILABLE  UTILIZING  PT401/PT501  MEASUREMENT  V43P4121C/V43P5121C. 
IF  ALL  REDUNDANCY  IS  LOST  (FAILS  LOW  INDICATING  LOSS  OF  HE)  THE 
REAL  STATUS  OF  THE  OMS  HE  TK  WILL  BE  UNAVAILABLE  OR  ERRONEOUS 
INDICATION  AND  CAN  RESULT  IN  FAILING  LT/RT  OMS  HE  TK  (SEE  FLIGHT 
RULE  6-1)  DURING  ASCENT  REQUIRING  AN  ATO  BE  CALLED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-348 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

447 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  SENSOR  TEMPERATURE,  OMS  HE  TANK  UPPER 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS -OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  HE  PRESS  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  OMS  HE  TANK  UPPER 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  OMS,  HE 

TANK 

PART  NUMBER:  51V43TT403,  52V43TT501 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  VALIDITY  OF  TEMP  MEASUREMENT  CAN  BE  DETERMINED  FROM  THE 
PRESSURE  MEASUREMENTS  V43P4122C  & V43P4211C/V43P5122C  & 
V43P5211C.  IF  ALL  REDUNDANCY  IS  LOST  (PRESSURE  SENSORS  FAIL  LOW 
INDICATING  LOSS  OF  HE)  THE  REAL  STATUS  OF  THE  OMS  HE  TK  WILL  BE 
UNAVAILABLE  OR  ERRONEOUS  INDICATION  AND  CAN  RESULT  IN  FAILING 
RT/LT  OMS  HE  TK  (REF  FLIGHT  RULE  6-1)  DURING  ASCENT  REQUIRING  AN 
ATO  BE  CALLED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-349 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/12/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  448  ABORT:  3/3 

ITEM:  SENSOR  TEMP,  OX/HE  TEST  PORT  FITTING  TEMP  1 & TEMP 

2 

FAILURE  MODE;  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 
TOLERANCE) 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D. J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  HE  PRESS  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  OX/HE  TEST  PORT  FITTING  TEMP  1 & TEMP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION;  OX/HE  TEST  PORT 

PART  NUMBER;  51V43TT408,  51V43TT417,  52V43TT508,  52V43TT517 
CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  SENSOR  FAILURE  CAN  BE  DETERMINED  BY  MONITORING  REDUNDANT 
MEASUREMENT  AND  OTHER  KEEL  WEB  HTR  SYSTEM  TEMP  MEASUREMENTS. 
LOSS  OF  ALL  REDUNDANCY  COULD  LEAD  TO  INCORRECTLY  FAILING  HTR 
51V43HR191/52V43HR192  AND  SWITCHING  TO  REDUNDANT  HTR  GROUP,  AND 
THEN  FAILING  HTR  51V43HR191/52V43HR192.  THIS  HEATER  IS  NOT 
MISSION  CRITICAL. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  820CT,  LTR  JUNE 

85 


REPORT  DATE  02/04/87 


C-350 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/13/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  OMS  FLIGHT:  3/2R 

MDAC  ID:  449  ABORT;  3/3 

ITEM:  SWITCH  TOGGLE,  OMS  N2/HE  PRESSURE  DISPLAY  SELECT 

FAILURE  MODE:  FAILS  TO  SWITCH  (POLES  STUCK  IN  ONE  OF  THREE 

POSITIONS  OR  POLES  FAIL  TO  MAKE  CONTACT  IN  ANY  POSITION) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  HE  PRESS  SUBSYSTEM 

4)  SWITCH  TOGGLE,  OMS  N2/HE  PRESSURE  DISPLAY  SELECT 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING; 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 


LOCATION:  PNL  F7A5  SI 

PART  NtJMBER:  34V73A7A5-S1 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  UTILIZE  GAGE  M2  FOR  MONITORING  LT/RT  HE  OR  N2 
PRESSURE  (ALSO  PAYLOAD  KIT  HE  PRESSURE).  THERE  ARE  STILL  TWO 
PRESSURE  MEASUREMENTS  AVAILABLE  FOR  EACH  LT/RT  HE  AND  N2  THROUGH 
THE  GPC* 

THE  LOSS  OF  ALL  SIGNAL  PATHS  FOR  HE  AND  N2  PRESSURE  WOULD  RESULT 
IN  LOSS  OF  MISSION  FOR  SAFETY  REASONS  SINCE  ACTUAL  STATUS  OF 
EITHER  SYSTEM  WOULD  BE  UNAVAILABLE 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-351 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/lR 

MDAC  ID: 

450 

ABORT: 

3/lR 

ITEM: 

DIODE 

FAILURE  MODE 

: FAILS  OPEN 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS 

: 3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114-ALL  DIODES; 

54V76A114 

-ALL  DIODES 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

OUT  OF  THE  28  DIODES  THERE  ARE  6 OF  WHICH  A FAILURE  WOULD  RESULT 
IN  LOSS  OF  ONE  OF  FOUR  SIGNAL  PATHS  TO  OPEN  THE  TK  ISOL  A VLV 
LOSS  OF  ALL  REDUNDANCY  CAN  CAUSE  LOSS  OF  VEHICLE/LIFE  DURING 
ENTRY  OR  ABORTS  DUE  TO  INABILITY  TO  USE/DEPLETE  PROPELLANT 
(POSSIBLE  STRUCTURAL  & MASS  PROPERTIES  VIOLATION). 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-352 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM;  OMS 
MDAC  ID:  451 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

2/lR 

2/lR 


ITEM:  DIODE 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/S AFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4 

, MCA  1 

PART  NUMBER:  54V76A114-ALL  DIODES;  54V76A114-ALL  DIODES 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

OUT  OF  THE  28  DIODES  THERE  ARE  TWO  OF  WHICH  A FAILURE  WOULD 
RESULT  IN  ONE  OF  THE  TWO  TK  ISOL  A VLVS  BEING  STUCK  PARTIALLY 
OPEN/CLOSED  WHEN 

COMMANDED  OPEN  WHICH  IS  THE  WORST  CASE.  WITH  ONE  VALVE  FAILED 
MIDTRAVEL,  ONE  FAILURE  (FAILURE  TO  OPEN  OTHER  VALVE)  AWAY  FROM 
POSSIBLE  LOSS  OF  VEHICLE/LIFE  DURING  ENTRY  DUE  TO  INABILITY  TO 
USE/ DEPLETE  PROPELLANT 

(POSSIBLE  STRUCTURAL  & MASS  PROPERTIES  VIOLATION).  FLOW  RATE 
INSUFFICIENT  TO  SUPPORT  BURN  THIS  MAKES  PROPELLAIJT  IN  AFFECTED 
TANK  UNUSABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-353 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  452 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/lR 

LIFTOFF; 

3/2R 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER;  56V76A116-ALL  DIODES;  56V76A116-ALL  DIODES 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

OUT  OF  THE  28  DIODES  THERE  ARE  6 OF  WHICH  A FAILURE  WOULD  RESULT 
IN  LOSS  OF  ONE  OF  FOUR  SIGNAL  PATHS  TO  OPEN  THE  TK  ISOL  B VLV 
LOSS  OF  ALL  REDUNDANCY  CAN  CAUSE  LOSS  OF  VEHICLE/LIFE  DURING 
ENTRY  OR  ABORTS  DUE  TO  INABILITY  TO  USE/DEPLETE  PROPELLANT 
(POSSIBLE  STRUCTURAL  & MASS  PROPERTIES  VIOLATION). 

REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-354 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  453 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

2/lR 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

2/lR 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/ SAFING 

: 3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

c [ P 3 

LOCATION:  AV  BAY 

6,  MCA  3 

PART  NUMBER:  56V76A116-ALL  DIODES;  56V76A116-ALL  DIODES 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

OUT  OF  THE  28  DIODES  THERE  ARE  TWO  OF  WHICH  A FAILURE  WOULD 
RESULT  IN  ONE  OF  THE  TWO  TK  ISOL  B VLVS  BEING  STUCK  PARTIALLY 
OPEN/CLOSED  WHEN 

COMMANDED  OPEN  WHICH  IS  THE  WORST  CASE.  WITH  ONE  VALVE  FAILED 
MIDTRAVEL,  ONE  FAILURE  (FAILURE  TO  OPEN  OTHER  VALVE)  AWAY  FROM 
POSSIBLE  LOSS  OF  VEHICLE/LIFE  DURING  ENTRY  DUE  TO  INABILITY  TO 
USE/DEPLETE  PROPELLANT 

(POSSIBLE  STRUCTURAL  & MASS  PROPERTIES  VIOLATION).  FLOW  RATE 
INSUFFICIENT  TO  SUPPORT  BURN  THIS  MAKES  PROPELLANT  IN  AFFECTED 
TANK  UNUSABLE. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-355 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  454 

ITEM:  DIODE 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/lR 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  XFEED  A VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

3/3 

RTLS; 

LIFTOFF: 

3/3 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/3 

ATO; 

LANDING/ SAFING; 

3/3 

HDW/FUNC 

3/lR 

3/lR 

3/3 

3/2R 


REDUNDANCY  SCREENS:  A[3]  B[P]  C[P] 

LOCATION;  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER;  54V76A114-ALL  DIODES;  56V76A116-ALL  DIODES 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

OUT  OF  THE  28  DIODES  THERE  ARE  6 OF  WHICH  A FAILURE  WOULD  RESULT 
IN  LOSS  OF  ONE  OF  FOUR  SIGNAL  PATHS  TO  OPEN  THE  TK  ISOL  A VLV. 
LOSS  OF  ALL  REDUNDANCY  IS  LOSS  OF  MISSION  DUE  TO  LOSS  OF  OMS 
INTERCONNECT/CROSSFEED  CAPABILITY  AND  LOSS  OF  ENGINE  REDUNDANCY 
FIRST  FAILURE  DURING 


RTLS  OR  TAL,  ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE  DUE  TO 
INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  JETS  RESULTING  IN  POSSIBLE 
INABILITY  TO  COMPLETE  TIME  CRITICAL  DUMP. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-356 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  455 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

2/lR 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  XFEED  A VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/3 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4 

, MCA  1;  AV 

BAY  6,  MCA  3 

PART  NUMBER:  54V76A114-ALL  DIODES;  56V76A116-ALL  DIODES 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

OUT  OF  THE  28  DIODES  THERE  ARE  TWO  OF  WHICH  A FAILURE  WOULD 
RESULT  IN  ONE  OF  THE  TWO  TK  ISOL  A VLVS 

BEING  STUCK  PARTIALLY  OPEN/CLOSE  WHEN  COMMANDED  OPEN  WHICH  IS  THE 
WORST  CASE.  LOSS  OF  ALL  REDUNDANCY  IS  LOSS  OF  MISSION  DUE  TO  LOSS 
OF  OMS  INTERCONNECT/CROSSFEED  CAPABILITY  AND  LOSS  OF  ENGINE 
REDUNDANCY.  FIRST  FAILURE  DURING 

RTLS  OR  TAL,  ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE  DUE  TO 
INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  JETS  RESULTING  IN  POSSIBLE 
INABILITY  TO  COMPLETE  TIME  CRITICAL  DUMP. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-357 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  456 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/lR 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  XFEED  B VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF; 

3/3 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/2R 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B C P ] 

C [ P ] 

LOCATION;  AV  BAY  5 

, MCA  2 

PART  NUMBER:  55V76A115-ALL  DIODES;  55V76A115-ALL  DIODES 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  OVERLOAD 
EFFECTS/RATIONALE ; 

OUT  OF  THE  28  DIODES  THERE  ARE  6 OF  WHICH  A FAILURE  WOULD  RESULT 
IN  LOSS  OF  ONE  OF  FOUR  SIGNAL  PATHS  TO  OPEN  THE  TK  ISOL  B VLV 
LOSS  OF  ALL  REDUNDANCY  IS  LOSS  OF  MISSION  DUE  TO  LOSS  OF  OMS 
INTERCONNECT/CROSSFEED  CAPABILITY  AND  LOSS  OF  ENGINE  REDUNDANCY. 
FIRST  FAILURE  DURING 

RTLS  OR  TAL,  ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE  DUE  TO 
INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  JETS  RESULTING  IN  POSSIBLE 
INABILITY  TO  COMPLETE  TIME  CRITICAL  DUMP. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-358 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/13/87 

OMS 

457 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/lR 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  XFEED  B VLVS 

5)  DIODE 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/3 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5 

, MCA  2 

PART  NUMBER:  55V76A115-ALL  DIODES;  55V76A115-ALL  DIODES 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

OUT  OF  THE  28  DIODES  THERE  ARE  TWO  OF  WHICH  A FAILURE  WOULD 
RESULT  IN  ONE  OF  THE  TWO  TK  ISOL  B VLVS 

BEING  STUCK  PARTIALLY  OPEN/CLOSE  WHEN  COMMANDED  OPEN  WHICH  IS  THE 
WORST  CASE.  LOSS  OF  ALL  REDUNDANCY  IS  LOSS  OF  MISSION  DUE  TO  LOSS 
OF  OMS  INTERCONNECT/CROSSFEED  CAPABILITY  AND  LOSS  OF  ENGINE 
REDUNDANCY.  FIRST  FAILURE  DURING 

RTLS  OR  TAL,  ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE  DUE  TO 
INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  JETS  RESULTING  IN  POSSIBLE 
INABILITY  TO  COMPLETE  TIME  CRITICAL  DUMP. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-359 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  458 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/lR 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF; 

3/3 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING 

; 3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

6,  MCA  3 

PART  NUMBER;  54V76A114AR19  TYPE  I;  56V76A116AR25  TYPE  1 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

BARBERPOLE  TALKBACK  TO  CREW  FALSELY  INDICATES  EITHER  THE  OX  VLV 
A,  THE  FU  VLV  A OR  BOTH  VLV'S  FAILED  TO  OPEN  WHEN  COMMANDED  AND 
HAVE  FAILED  PARTIALLY  CLOSED. 

WORST  CASE  IS  VLVS  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLVS 
ARE  USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  BE  FALSELY  FAILED  CLOSED.  THE  RESULT  IS  LOSS  OF 
VEHICLE/ LIFE  FOR  RTLS  & TAL. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-360 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  459 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/ S AFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  54 V76A114AR19  TYPE  I;  56V76A116AR25  TYPE  1 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE;  

BARBERPOLE  TALKBACK  TO  CREW  FALSELY  INDICATES  EITHER  OX  VLV  A,  FU 
VLV  A OR  BOTH  VLV'S  FAILED  TO  CLOSE  WHEN  COMMANDED  AND  HAVE 


FAILED  PARTIALLY  OPEN/PARTIALLY  CLOSED. 

GPC  TALKBACK  TO  CREW  IS  STILL  OPERATIONAL  AND  REDUNDANT  VLV  S ARE 
AVAILABLE  TO  CLOSE  XFEED  LINE. 

LOSS  OF  ALL  TALKBACK  INDICATION  OF  XFEED  VLV'S  CLOSING,  WORST 
CASE,  WOULD  RESULT  IN  FAILING  THE  CROSSFEED  VALVES  OPEN.  THIS  IS 
POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/CROSSFEED 
CAPABILITY  TO  RCS  (TO  AVOID  DIRECT  CONNECTION  OF  TK'S) . 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-361 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/14/87 

OMS 

460 


HIGHEST  CRITICALITY  HDW/FUNC 


ITEM: 

FAILURE  MODE: 


DRIVER,  HYBRID 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


FLIGHT: 

ABORT: 


SUBSYS  LEAD:  D.J.  PAUL 


3/2R 

3/3 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CONTROLS 

PROP  STOR  & DIST  SUBSYSTEM 
OX  & FU  TK  CROSSFEED  A VLVS 
DRIVER,  HYBRID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/2R 

3/3 

3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


LOCATION: 
PART  NUMBER: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


AV  BAY  6,  MCA  3 

54V76A114AR18  TYPE  I;  56V76A116AR26  TYPE  1 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

BARBERPOLE  TALKBACK  TO  CREW  FALSELY  INDICATES  EITHER  OX  VLV  A FU 
VLV  A OR  BOTH  VLV'S  FAILED  TO  CLOSE  WHEN  COMMANDED  AND  HAVE  ' 
FAILED  PARTIALLY  OPEN/PARTIALLY  CLOSED. 

GPC  TALKBACK  TO  CREW  IS  STILL  OPERATIONAL  AND  REDUNDANT  VLV'S  ARE 
AVAILABLE  TO  CLOSE  XFEED  LINE. 

LOSS  OF  ALL  TALKBACK  INDICATION  OF  XFEED  VLV'S  CLOSING,  WORST 
CASE,  WOULD  RESULT  IN  FAILING  THE  CROSSFEED  VALVES  OPEN.  THIS  IS 
POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/ CROSS  FEED 
CAPABILITY  TO  RCS  (TO  AVOID  DIRECT  CONNECTION  OF  TK'S) . 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-362 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/14/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

461 

ABORT: 

3/lR 

ITEM: 

DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/3 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  54V76A114AR18  TYPE  I; 

56V76A116AR26  TYPE  1 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

BARBERPOLE  TALKBACK  TO  CREW  FALSELY  INDICATES  EITHER  THE  OX  VLV, 
THE  FU  VLV  OR  BOTH  VLVS  FAILED  TO  OPEN  WHEN  COMMANDED  AND  HAVE 
FAILED  PARTIALLY  CLOSED. 

WORST  CASE  IS  VLVS  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLVS 
ARE  USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  FALSELY  BE  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  & TAL. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-363 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  462 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 

REDUNDANCY  SCREENS: 


LOCATION: 
PART  NUMBER: 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

;,  MCA  2 

55V76A115AR18  TYPE  1;  AR20  TYPE  1 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

BARBERPOLE  TALKBACK  TO  CREW  FALSELY  INDICATES  EITHER  OX  VLV  A,  FU 
VLV  A OR  BOTH  VLVS  FAILED  TO  CLOSE  WHEN  COMMANDED  AND  HAVE 
FAILED  PARTIALLY  OPEN/ PARTIALLY  CLOSED. 

GPC  TALKBACK  TO  CREW  IS  STILL  OPERATIONAL  AND  REDUNDANT  VLVS  ARE 
AVAILABLE  TO  CLOSE  XFEED  LINE. 

LOSS  OF  ALL  TALKBACK  INDICATION  OF  XFEED  VLVS  CLOSING,  WORST 
CASE,  WOULD  RESULT  IN  FAILING  THE  CROSSFEED  VALVE  OPEN  RESULTING 
IN  LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/CROSSFEED 
CAPABILITY  TO  RCS  (TO  AVOID  DIRECT  CONNECTION  OF  TK'S). 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-364 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


1/14/87 

OMS 

463 


ITEM; 

FAILURE  MODE; 


DRIVER,  HYBRID 
FAILS  HIGH 


LEAD  ANALYST;  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/lR 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
CONTROLS 

PROP  STOR  & DIST  SUBSYSTEM 
OX  & FU  TK  CROSSFEED  B VLVS 
DRIVER,  HYBRID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/lR 

LIFTOFF; 

3/3 

TAL; 

3/lR 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING 

: 3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY 

5,  MCA  2 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE;  

BARBERPOLE  TALKBACK  TO  CREW  FALSELY  INDICATES  EITHER  THE  OX  VLV, 
THE  FU  VLV  OR  BOTH  VLVS  FAILED  TO  OPEN  WHEN  COMMANDED  AND  HAVE 
FAILED  PARTIALLY  CLOSED. 

WORST  CASE  IS  VLVS  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLV  S 
ARE  USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DtJRING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  FALSELY  BE  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  & TAL. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-365 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/14/87 

OMS 

464 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  DRIVER,  HYBRID 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/lR 


SUBSYS  LEAD:  D.J.  PAUL 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 
HDW/FUNC  AB 

3/3 
3/3 
3/2R 
3/3 
3/3 


ABORT 

HDW/FUNC 

RTLS: 

3/lR 

TAL: 

3/lR 

AOA: 

3/3 

ATO: 

3/3 

[ P ] 

C [ P ] 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115AR17  TYPE  1;  AR19  TYPE  1 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

BARBERPOLE  TALKBACK  TO  CREW  FALSELY  INDICATES  EITHER  THE  OX  VLV 
THE  FU  VLV  OR  BOTH  VLVS  FAILED  TO  OPEN  WHEN  COMMANDED  AND  HAVe' 
FAILED  PARTIALLY  CLOSED. 

WORST  CASE  IS  VLV*S  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLVS 
ARE  USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  FALSELY  BE  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  & TAL. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-366 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  465 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5 

, MCA  2 

PART  NUMBER:  55V76A115AR17  TYPE  1;  AR19  TYPE  1 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

BARBERPOLE  TALKBACK  TO  CREW  FALSELY  INDICATES  EITHER  OX  VLV  A,  FU 
VLV  A OR  BOTH  VLVS  FAILED  TO  CLOSE  WHEN  COMMANDED  AND  HAVE 
FAILED  PARTIALLY  OPEN/ PARTIALLY  CLOSED. 

GPC  TALKBACK  TO  CREW  IS  STILL  OPERATIONAL  AND  REDUNDANT  VLVS  ARE 
AVAILABLE  TO  CLOSE  XFEED  LINE. 

LOSS  OF  ALL  TALKBACK  INDICATION  OF  XFEED  VLVS  CLOSING,  WORST 
CASE,  WOULD  RESULT  IN  FAILING  THE  CROSSFEED  VALVE  OPEN  RESULTING 
IN  LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/CROSSFEED 
CAPABILITY  TO  RCS  (TO  AVOID  DIRECT  CONNECTION  OF  TK'S). 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-367 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  466 


item:  driver,  hybrid 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO; 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


C [ P ] 


LOCATION;  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114AR17  TYPE  1;  AR21  TYPE  1 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

CREW  LT/RT  OMS  ISOL  A POSITION  INDICATION  DS5/DS7  WOULD  FALSELY 
SHOW  A BARBERPOLE  INDICATING  EITHER  THE  FUEL  OR  OX  "A”  VALVES  ARE 
STUCK  PARTIALLY  OPEN/CLOSE  OR  THERE  IS  A POSITION  MISMATCH 
BETWEEN  THE  TWO  VALVES. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS  (ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE). 

REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-368 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM;  OMS 
MDAC  ID;  467 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION;  AV  BAY  4,  MCA  1 

PART  NUMBER;  54V76A114AR17  TYPE  1;  AR21  TYPE  1 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

CREW  LT/RT  OMS  ISOL  A POSITION  INDICATION  DS5/DS7  WOULD  SHOW  A 
BARBER  POLE  WHEN  THE  OX  AND  FU  TK  ISOL  A VALVES  ARE  COMMANDED 
CLOSED  FALSELY  INDICATING  THE  FU  OR  OX  ”A"  VALVES  ARE  STUCK 
PARTIALLY  OPEN/CLOSE. 

LOSS  OF  ALL  REDUNDANCY  COULD  FALSELY  RESULT  IN  FAILING  THE  A OR  B 
VALVES  OPEN.  THE  ONLY  EFFECT  A FAILED  OPEN  VALVE  HAS  IS  AN 
UNDESIRABLE  INTERCONNECT/CROSSFEED  CONFIGURATION  TO  THE  AFFECTED 
POD. 

XFEED  STILL  AVAILABLE,  NO  MISSION  IMPACT. 

REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-369 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  468 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRE LAUNCH; 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER;  54V76A114AR16  TYPE  1;  AR20  TYPE  1 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

CREW  LT/RT  OMS  ISOL  A POSITION  INDICATION  DS5/DS7  WOULD  SHOW  A 
BARBER  POLE  WHEN  THE  OX  AND  FU  TK  ISOL  A VALVES  ARE  COMMANDED 
CLOSED  FALSELY  INDICATING  THE  FU  OR  OX  "A"  VALVES  ARE  STUCK 
PARTIALLY  OPEN/CLOSE. 

LOSS  OF  ALL  REDUNDANCY  COULD  FALSELY  RESULT  IN  FAILING  THE  A OR  B 
VALVES  OPEN.  THE  ONLY  EFFECT  A FAILED  OPEN  VALVE  HAS  IS  AN 
UNDESIRABLE  INTERCONNECT/ CROSS FEED  CONFIGURATION  TO  THE  AFFECTED 
POD. 

XFEED  STILL  AVAILABLE,  NO  MISSION  IMPACT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-370 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  469 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4 

, MCA  1 

PART  NUMBER:  54V76A114AR16  TYPE  1; 

AR20  TYPE  1 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

CREW  LT/RT  OMS  ISOL  A POSITION  INDICATION  DS5/DS7  WOULD  FALSELY 
SHOW  A BARBERPOLE  INDICATING  EITHER  THE  FUEL  OR  OX  "A"  VALVES  ARE 
STUCK  PARTIALLY  OPEN/CLOSE  OR  THERE  IS  A POSITION  MISMATCH 
BETWEEN  THE  TWO  VALVES. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS  (ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE) . 

REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-371 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/13/87 

OMS 

470 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3  . 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, MCA  3 

PART  NUMBER:  56V76A116AR23  TYPE 

1;  AR21  TYPE  1 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

CREW  LT/RT  OMS  ISOL  B POSITION  INDICATION  DS6/DS8  WOULD  FALSELY 
SHOW  A BARBERPOLE  INDICATING  EITHER  THE  FUEL  OR  OX  "B”  VALVES  ARE 
STUCK  PARTIALLY  OPEN/CLOSE  OR  THERE  IS  A POSITION  MISMATCH 
BETWEEN  THE  TWO  VALVES. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSE  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS  (ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE) . 

REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-372 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM;  OMS 
MDAC  ID;  471 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 


PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS;  A 

[ 

] 

B [ 

] 

c [ ] 

LOCATION;  AV  BAY  6, 

MCA 

3 

PART  NUMBER;  56V76A116AR23 

TYPE  1 

; AR21 

TYPE 

1 

CAUSES ; CONTAMINATION , 

VIBRATION, 

PIECE 

PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

CREW  LT/RT  OMS  ISOL  B POSITION  INDICATION  DS6/DS8  WOULD  SHOW  A 
BARBERPOLE  WHEN  THE  OX  AN  FU  TK  ISOL  B VALVES  ARE  COMMANDED 
CLOSED  FALSELY  INDICATING  THE  FU  OR  OX  B VALVES  ARE  STUCK 
PARTIALLY  OPEN/CLOSE. 

LOSS  OF  ALL  REDUNDANCY  COULD  FALSELY  RESULT  IN  FAILING  THE  A OR  B 
VALVES  OPEN.  THE  ONLY  EFFECT  A FAILED  OPEN  VALVE  HAS  IS  AN 
UNDESIRABLE  INTERCONNECT/CROSSFEED  CONFIGURATION  TO  THE  AFFECTED 
POD.  XFEED  STILL  AVAILABLE,  NO  MISSION  IMPACT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-373 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  472  ABORT;  3/3 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION;  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116AR24  TYPE  1;  AR22  TYPE  1 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

CREW  LT/RT  OMS  ISOL  B POSITION  INDICATION  DS6/DS8  WOULD  SHOW  A 
BARBERPOLE  WHEN  THE  OX  OR  FU  TK  ISOL  B VALVES  ARE  COMMANDED 
CLOSED  FALSELY  INDICATING  THE  FU  OR  OX  B VALVES  ARE  STUCK 
PARTIALLY  OPEN/CLOSE. 

LOSS  OF  ALL  REDUNDANCY  COULD  FALSELY  RESULT  IN  FAILING  THE  A OR  B 
VALVES  OPEN.  THE  ONLY  EFFECT  A FAILED  OPEN  VALVE  HAS  IS  AN 
UNDESIRABLE  INTERCONNECT/CROSSFEED  CONFIGURATION  TO  THE  AFFECTED 
POD.  XFEED  STILL  AVAILABLE,  NO  MISSION  IMPACT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-374 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  473 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  DRIVER,  HYBRID 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, MCA  3 

PART  NUMBER:  56V76A116AR24  TYPE  1; 

AR22  TYPE  1 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

CREW  LT/RT  OMS  ISOL  B POSITION  INDICATION  DS6/DS8  WOULD  FALSELY 
SHOW  A BARBERPOLE  INDICATING  EITHER  THE  FUEL  OR  OX  "B"  VALVES  ARE 
STUCK  PARTIALLY  OPEN/CLOSE  OR  THERE  IS  A POSITION  MISMATCH 
BETWEEN  THE  TWO  VALVES. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS  (ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE) . 

REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-375 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/2R 

MDAC  ID;  474  ABORT:  3/lR 

ITEM:  FUSE,  lA 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  FUSE,  lA 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/lR 

LIFTOFF; 

3/3 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  08  S26;  S28 

PART  NUMBER:  33V73AA8F17;  F18 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ONE  OF  TWO  ELECTRICAL  PATHS  (OR  LOSE  ONLY  PATH)  TO  OVERRIDE 
GPC  AND  OPEN  (CLOSE)  LT/RT  OX  TK  XFEED  VLV  A.  LOSS  OF  ALL 
REDUNDANCY  HAS  THE  SAME  EFFECT  AS  TK  XFEED  VLVS  LT/RT  FAILING 
CLOSED  (LOSS  OF  MISSION)  RESULTING  IN  LOSS  OF  ENGINE  REDUNDANCY, 
LOSS  OF  PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES, 

AND  LOSS  OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF 
PREVIOUS  FAILURE  REQUIRES  SUCH  ACTION.  WITH  FIRST  FAILURE  DURING 
RTLS  OR  TAL,  ONE  FAILURE  (FAILURE  TO  OPEN  OF  PARALLEL  VALVE) 

AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  INABILITY  TO  DUMP 
OMS  PROP  THROUGH  RCS  AND  COMPLETE  TIME  CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  TK  STRUCTURAL  AND  MASS  PROPERTY  VIOLATIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-376 


date: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/14/87 

OMS 

475 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/lR 


ITEM:  FUSE,  lA 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  FUSE,  lA 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING ; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/2R 


C [ P ] 


LOCATION:  PNL  08  S26;  S28 

PART  NUMBER:  33V73AA8F8;  F9 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


Ss1‘^He“"too“LeCTRICAL  paths  (OR  LOSE  ONLY  PATH)  TO  OVERRI^ 
GPC  AND  OPEN  (CLOSE)  LT/RT  OX  TK  XFEED  VLV  A.  LOSS  OF  ALL 
REDUNDANCY  HAS  THE  SAME  EFFECT  AS  TK  XFEED  VLV'S  LT/RT  FALLING 
CLOSED  fliOSS  OF  MISSION)  RESULTING  IN  LOSS  OF  ENGINE  REDUNDANCY, 
TOSS  OF  PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES, 
mI  lSL  ??^AbLiTY  t5  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF 

Squires  sdch  action  with 

■RTLS  OR  TAL  ONE  FAILURE  (FAILURE  TO  OPEN  OF  PARALLEL 
AW^  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  INABILITY  TO  DUMP 
nMS  PPOP  THROUGH  RCS  AND  COMPLETE  TIME  CRITICAL  OMS  DUMP 
^Iul??L  ?oL?bL  TK  STRUCTURAL  AND  MASS  PROPERTY  VIOLATIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-377 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  476 

ITEM:  FUSE,  lA 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  FUSE,  lA 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/lR 


CRITICALITIES 

ABORT  HDW/FOKC 

3/3  rtls;  3/iR 

LIFTOFF;  3/3 

ONORBIT:  3/2R  AOA*  3/3 

DEORBIT:  3/3  ATO*  3/L 

LANDING/SAFING;  3/3  / 

REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 

LOCATION:  PNL  08  S27;  S29 

PART  NUMBER;  33V73A8F25;  F26 

mechanical  shock,  thermal 

effects/rationale ; 

ELECTRICAL  PATHS  (OR  LOSE  ONLY  PATH)  TO  OVERRTnF 
GPC  AND  OPEN  (CLOSE)  LT/RT  OX  TK  XFEED  VLV  B.  OP  a?7 

SAME  EFFECT  AS  TK  XFEED  VLVS  LT/RT  FAILING 
CLOSED  (LOSS  OF  MISSION)  RESULTING  IN  LOSS  OF  ENGTNF  PFnnxrnaMr'v 

CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF 
failure  requires  such  action.  with  first  failure  DURING 

POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  INABILITY  TO  DUMP 

MSuSTNr'^?S°Sn?cTS?r.^°  COMPLETE  TIME  CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  TK  STRUCTURAL  AND  MASS  PROPERTY  VIOLATIONS. 

REFERENCES;  VS70-943099  REV  A EO  B12 


B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/2R 


C [ P ] 


REPORT  DATE  02/04/87 


C-378 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  477 


ITEM:  FUSE,  lA 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/lR 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  FUSE,  lA 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING 

HDW/FUNC 
3/3 
3/3 
3/2R 
3/3 
: 3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/lR 

3/lR 

3/3 

3/2R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  08  S27;  S29 

PART  NUMBER:  33V73A8F30;  F31 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


effects /rationale • 

LOSE  ONE  OF  TWO  ELECTRICAL  PATHS  (OR  LOSE  ONLY  PATH)  TO  OVERRIDE 
GPC  AND  OPEN  (CLOSE)  LT/RT  OX  TK  XFEED  VLV  B.  LOSS  OF  ALL 
REDUNDANCY  HAS  THE  SAME  EFFECT  AS  TK  XFEED  VLVS  LT/RT  FAILING 
CLOSED  (LOSS  OF  MISSION)  RESULTING  IN  LOSS  OF  ENGINE  REDUNDANCY, 
LOSS  OF  PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES, 

AND  LOSS  OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF 
PREVIOUS  FAILURE  REQUIRES  SUCH  ACTION.  WITH  FIRST  FAILURE  DURING 
RTLS  OR  TAL,  ONE  FAILURE  (FAILURE  TO  OPEN  OF  PARALLEL  VALVE) 

AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO  INABILITY  TO  DUMP 
OMS  PROP  THROUGH  RCS  AND  COMPLETE  TIME  CRITICAL  OMS  *^UMP 
RESULTING  IN  POSSIBLE  TK  STRUCTURAL  AND  MASS  PROPERTY  VIOLATIONS. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-379 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/13/87 

OMS 

478 


ITEM: 

FAILURE  MODE: 


FUSE,  lA 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CONTROLS 

PROP  STOR  & DIST  SUBSYSTEM 
OX  & FU  TK  ISOL  A VLVS 
FUSE,  lA 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


LOCATION: 
PART  NUMBER: 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/lR 

3/2R 

TAL: 

3/lR 

3/2R 

AOA: 

3/lR 

3/lR 

3/3 

ATO: 

3/lR 

A [ 2 ] 
S19;  S21 

B [ P ] 

C [ P ] 

33V73A8F5;  F6 


MOCKf’oVERIO^^*^^^^°^'  MECHANICAL  SHOCK,  THERMAL 

EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  AND  CMD  LT/RT  OMS  OX  AND  FU  TSOT. 

VALVES 

OPERATED  BY  GPC  AND  OPENED  WITH  CREW  SWITCH. 

results  IN  BOTH  TK  ISOL 

® failed  closed  resulting  in  an  inability  to 
propellant,  trapped  propellant  is  possible 

STRUCTURAL  AND  MASS  PROPERTIES  CONSTRAINTS  DURING 

aNTRY • 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-380 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  479 


ITEM:  FUSE,  lA 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/lR 

3/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  FUSE,  lA 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  08, 

S19;  S21 

PART  NUMBER:  33V73A8F14;  F15 

CAUSES:  CONTAMINATION 

, VIBRATION, 

MECHANICAL 

SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  AND  CMD  LT/RT  OMS  OX  AND  FU  ISOL 
A VALVES  CLOSED  USING  CREW  SWITCH.  VALVES  CAN  STILL  BE  FULLY 
OPERATED  BY  GPC  AND  OPENED  WITH  CREW  SWITCH. 

LOSS  OF  ALL  REDUNDANCY,  WORST  CASE,  RESULTS  IN  BOTH  TK  ISOL 
VALVES  A AND  B FAILED  CLOSED  RESULTING  IN  AN  INABILITY  TO 
USE/DEPLETE  OMS  PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE 
VIOLATION  OF  STRUCTURAL  AND  MASS  PROPERTIES  CONSTRAINTS  DURING 
ENTRY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-381 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  480 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM: 

FAILURE  MODE: 
LEAD  ANALYST: 


FUSE,  lA 
FAILS  OPEN 

V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOfe  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  FUSE,  lA 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/lR 

DEORBIT; 

3/lR 

ATO: 

3/lR 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  08,  S20;  S22 

PART  NUMBER;  33V73A8F29;  F40 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  AND  CMD  LT/RT  OMS  OX  AND  FU  ISOL 
B VALVES  CLOSED  USING  CREW  SWITCH.  VALVES  CAN  STILL  BE  FULLY 
OPERATED  BY  GPC  AND  OPENED  WITH  CREW  SWITCH. 

LOSS  OF  ALL  REDUNDANCY,  WORST  CASE,  RESULTS  IN  BOTH  THE  TK  ISOL 
VALVES  A AND  B FAILED  CLOSED  RESULTING  IN  AN  INABILITY  TO 
USE/DEPLETE  OMS  PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE 
VIOLATION  OF  STRUCTURAL  AND  MASS  PROPERTIES  CONSTRAINTS  DURING 
ENTRY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-382 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  481 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/lR 

3/lR 


ITEM;  FUSE,  lA 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  FUSE,  lA 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B C P ] 

C [ P ] 

LOCATION:  PNL  08,  S20;  S22 

PART  NUMBER;  33V73A8F35;  F24 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  OVERRIDE  GPC  AND  CMD  LT/RT  OMS  OX  AND  FU  ISOL 
B VALVES  CLOSED  USING  CREW  SWITCH.  VALVES  CAN  STILL  BE  FULLY 
OPERATED  BY  GPC  AND  OPENED  WITH  CREW  SWITCH. 

LOSS  OF  ALL  REDUNDANCY,  WORST  CASE,  RESULTS  IN  BOTH  THE  TK  ISOL 
VALVES  A AND  B FAILED  CLOSED  RESULTING  IN  AN  INABILITY  TO 
USE/DEPLETE  OMS  PROPELLANT.  TRAPPED  PROPELLANT  IS  POSSIBLE 
VIOLATION  OF  STRUCTURAL  AND  MASS  PROPERTIES  CONSTRAINTS  DURING 
ENTRY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-383 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  482 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/2R 

3/2R 


ITEM;  RELAY 

FAILURE  MODE:  FAILS  OPEN  (FAILS  TO  ENERGIZE) 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER;  54V76A114K49,  K50;  56V76A116K74,  K76 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  AN  INABILITY  TO  CLOSE  THE  FU  TK  XFEED 
"A”  VALVE  AND  LOSS  OF  LT  & RT  RCS  CROSSFEED  CAPABILITY  DURING  AN 
OMS  BURN  TO  AVOID  A DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS.  LOSS 
OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
CROSSFEED  CAPABILITY  (TO  AVOID  DIRECT  CONNECTION  OF  OMS  AND  RCS 
TANKS).  WITH  ONE  CROSSFEED  VALVE  FAILED  OPEN,  A SECOND  FAILURE, 

A FAILED  OPEN  RCS  CROSSFEED  VALVE  WOULD  REQUIRE  THE  USE  OF  TANK 
ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS  AND  RCS  TANKS. 

REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-384 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  483 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (ENERGIZED) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ S AFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  54V76A114K49 , K50;  56V76A116K74,  76 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS /RATIONALE • 

NONE,  REDUNDANT  RELAY  WILL  MAINTAIN  PROPER  CONTROL  TO  CLOSE  FU  TK 
XFFED  VLV  A 

LOSS  OF  ALL  REDUNDANCY,  WORST  CASE,  WOULD  BE  A MOMENTARY  CLOSURE 
OF  XFEED  VLVS  A & B (LT/RT)  DURING  A BURN.  . 

PROPER  XFEED  OPERATION  CAN  BE  RESTORED  BY  PLACING  THE  OMS  XFEED  A 
OR  B (LT/RT)  SWITCH  IN  THE  OPEN  POSITION. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-385 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  484 

ITEM:  RELAY 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/lR 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/lR 

3/3 

TAL: 

3/lR 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/2R 

A [ 2 ] 

B [ F ] 

C [ P ] 

!,  MCA  3 

L4K51,  K52; 

56V76A116K75, 

77 

FLIGHT  PHASE  HDW/FUN 

PRELAUNCH:  3/3 

LIFTOFF:  3/3 

ONORBIT:  3/2R 

DEORBIT:  3/3 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AV  BAY  6.  MCA  3 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

ELECTRICAL  PATHS  TO  OPEN  FU  TK  XFEED  VLV  A 
LT/RT.  LOSS  OF  ALL  REDUNDANCY  HAS  THE  SAME  RESULT  AS  TK  XFEED 

MISSION)  RESULTING  if  ^SS 
REDUNDANCY,  LOSS  OF  PROTECTION  AGAINST  SUBSEQUENT 

FAILURES,  AND  LOSS  OF  CAPABILITY  TO  BALANCE  PROP 
WEIGHTS  BETWEEN  PODS  IF  PREVIOUS  FAILURE  REQUIRES  SUCH  ACTION. 

FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE  (FAILURE  TO 
OPEN  OF  PARALLEL  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
inability  to  dump  OMS  PROP  THROUGH  RCS  AND  COMPLETE  TIME 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  TK  STRUCTURAL  AND  MASS 
PROPERTY  VIOLATIONS. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-386 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM;  OMS 
MDAC  ID;  485 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/2R 


ITEM;  RELAY 

FAILURE  MODE;  FAILS  CLOSED  (ENERGIZED) 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/2R 

LANDING/SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY 

6,  MCA  3 

PART  NUMBER;  54V76A114K51,  K52; 

56V76A116K75, 

77 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  FAILED  OPEN  FU  TK  XFEED  "A”  VAVLES  AND 
LOSS  OF  ANY  RCS  CROSSFEED  CAPABILITY  DURING  AN  OMS  BURN  TO  AVOID 
A DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS.  LOSS  OF  ALL  REDUNDANCY 
IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF  CROSSFEED  CAPABILITY 
TO  AVOID  DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS. 

A SECOND  FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE,  WOULD 
REQUIRE  THE  USE  OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS 
AND  RCS  TANKS. 

REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-387 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/14/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

486 

ABORT: 

3/2R 

ITEM: 

RELAY 

FAILURE  MODE 

1:  FAILS  OPEN  (FAILS 

TO  ENERGIZE) 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


PLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/2R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115K41,  K42; 

K49,  K50 

CAUSES: 


CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

first  failure  results  in  an  inability  to  close  the  FU  TK  XFEED 
”B“  VALVE  AND  LOSS  OF  LT  & RT  RCS  CROSSFEED  CAPABILITY  DURING  AN 
OMS  BURN  TO  AVOID  A DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS.  LOSS 
OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
CROSSFEED  CAPABILITY  (TO  AVOID  DIRECT  CONNECTION  OP  ALL  OMS  AND 
RCS  TANKS) . WITH  ONE  OMS  CROSSFEED  VALVE  FAILED  OPEN,  A SECOND 
FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE  WOULD  REQUIRE  THE  USE 
OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS  AND  RCS  TANKS. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-388 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/14/87 

OMS 

487 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM;  RELAY 

FAILURE  MODE;  FAILS  CLOSED  (ENERGIZED) 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION;  AV  BAY  5,  MCA  2 

PART  NUMBER;  55V76A115K41,  K42;  K49,  K50 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE;  tttt 

NONE,  REDUNDANT  RELAY  WILL  MAINTAIN  PROPER  CONTROL  OF  CLOSING  FU 

TK  XFEED  VLV  B. 

LOSS  OF  ALL  REDUNDANCY  WORST  CASE  WOULD  BE  A MOMENTARY  CLOSURE  OF 
XFEED  VLVS  A & B (LT/RT)  DURING  A BURN. 

PROPER  XFEED  OPERATION  CAN  BE  RESTORED  BY  PLACING  THE  OMS  XFEED  A 
OR  B (LT/RT)  SWITCH  IN  THE  OPEN  POSITION. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-389 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


date:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  488 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/lR 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  OPEN  (FAILS  TO  ENERGIZE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRE LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/2R 

3/3 

3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/2R 


REDUNDANCY  SCREENS;  A [ 2 ] B [ F 

LOCATION;  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115K40,  K43;  K48,  K51 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  I^SE  ONE  OF  TWO  ELECTRICAL  PATHS  TO  OPEN  LT/RT  FU  TK  XFEED 
VLV  B.  LOSS  OF  ALL  REDUNDANCY  HAS  THE  SAME  RESULT  AS  LT/RT  TK 
XFEED  VALVES  FAILING  CLOSED  (LOSS  OF  MISSION)  RESULTING  IN  LOSS 
OF  ENGINE  REDUNDANCY,  LOSS  OF  PROTECTION  AGAINST  SUBSEQUENT 
^GINE  OR  PROP  FAILURES,  AND  LOSS  OF  CAPABILITY  TO  BALANCE  PROP 
WEIGHTS  BETWEEN  PODS  IF  PREVIOUS  FAILURE  REQUIRES  SUCH  ACTION 
WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE  (FAILURE  TO 
OPEN  OF  PARALLEL  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  AND  COMPLETE  TIME 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  TK  STRUCTURAL  AND  MASS 
PROPERTY  VIOLATIONS. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-390 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  489 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/2R 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (ENERGIZED) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5 

, MCA  2 

PART  NUMBER:  55V76A115K40,  K43; 

K48,  K51 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  FAILED  OPEN  FU  TK  XFEED  ''B”  VALVES  AND 
LOSS  OF  ANY  RCS  CROSSFEED  CAPABILITY  DURING  AN  OMS  BURN  TO  AVOID 
A DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS.  LOSS  OF  ALL  REDUNDANCY 
IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF  CROSSFEED  CAPABILITY 
TO  AVOID  DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS. 

A SECOND  FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE,  WOULD 
REQUIRE  THE  USE  OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS 
AND  RCS  TANKS. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-391 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  490 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  OPEN  (RELAY  FAILS  TO  ENERGIZE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION;  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114K41,  42;  K57,  58 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

LOSE  ABILITY  TO  CLOSE  LT/RT  FU  TK  ISOL  A VALVE.  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LT/RT  FU  TK  ISOL  A AND  B VALVES  FAILED 
OPEN.  VALVES  ARE  NORMALLY  OPEN.  THE  ONLY  EFFECT  A FAILED  OPEN 
VALVE  COULD  HAVE  IS  A UNDESIRABLE  INTERCONNECT/CROSSFEED 
CONFIGURATION  TO  AFFECTED  POD  (DIRECT  CONNECTION  OF  TANKS).  OMS 
XFEED  CAN  STILL  BE  PERFORMED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14; 

MC284-0430  REV  E AMENDMENT  F-07 


REPORT  DATE  02/04/87 


C-392 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  491 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/lR 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (STUCK  IN  ENERGIZED  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  A VLVS 

5)  RELAY 

6) 

7) 

8) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF; 

3/3 

TAL: 

3/lR 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114K41,  42;  K57,  58 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

A FAILED  CLOSED  RELAY  K41  OR  42/K57  OR  58  (LT/RT)  HAS  NO  EFFECT 
ON  VALVE  OPERATION.  A FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN 
CLOSURE  OF  FUEL  TANK  ISOL  VALVE  A & B (LT/RT). 

THIS  FAILURE  CAN  BE  CORRECTED  BY  PLACEMENT  OF  LT/RT  OMS  TK  ISOL 
SWITCH  A & B INTO  THE  OPEN  POSITION.  DURING  TIME  CRITICAL  ABORT 
DUMPS  AN  OME  SHUT  DOWN  COULD  OCCUR  BEFORE  PROPER  ACTION  IS 
TAKEN  AND  RESULT  IN  LOSS  OF  VEHICLE/LIFE. 

REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14; 

MC284-0430  REV  E AMENDMENT  F-07 


REPORT  DATE  02/04/87 


C-393 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  492 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  OPEN  (RELAY  FAILS  TO  ENERGIZE) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54 V76A114K43 , 44;  K59,  60 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

A FAILED  OPEN  RELAY  K43  OR  44/K59  OR  60  (LT/RT)  HAS  NO  EFFECT  ON 
VALVE  OPERATION.  A FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  AN 
INABILITY  TO  OPEN  FU  TK  ISOL  VALVE’S  A & B (LT/RT). 

THIS  PRECLUDES  USE/DEPLETION  OF  PROP  RESULTING  IN  VIOLATION  OF 
STRUCTURAL  AND  MASS  PROPERTIES  CONSTRAINTS  DURING  ENTRY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14; 

MC284-0430  REV  E AMENDMENT  F-07 


REPORT  DATE  02/04/87 


C-394 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID;  493 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM;  RELAX 

FAILURE  MODE:  FAILS  CLOSED  (STUCK  IN  ENERGIZED  POSITION) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c C ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54 V76A114K43 , 44;  K59,  60 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  ABILITY  TO  CLOSE  LT/RT  FU  TK  ISOL  A VALVE.  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LT/RT  FU  TK  ISOL  A AND  B VALVES  FAILED 
OPEN.  VALVES  ARE  NORMALLY  OPEN.  THE  ONLY  EFFECT  A FAILED  OPEN 
VALVE  COULD  HAVE  IS  AN  UNDESIRABLE  INTERCONNECT/CROSSFEED 
CONFIGURATION  TO  AFFECTED  POD  (DIRECT  CONNECTION  OF  TANKS) . OMS 
XFEED  CAN  STILL  BE  PERFORMED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14; 

MC284-0430  REV  E AMENDMENT  F-07 


REPORT  DATE  02/04/87 


C-395 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT; 

3/3 

MDAC  ID; 

494 

ABORT; 

3/3 

ITEM; 

RELAY 

FAILURE  MODE;  FAILS  OPEN  (RELAY 

FAILS  TO 

ENERGIZE) 

LEAD  ANALYST 

';  V.J.  BURKEMPER 

SUBSYS 

LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING ; 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA; 

3/3 

3/3 

3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ 

LOCATION;  AV  BAY  6,  MCA  3 

PART  NUMBER;  56V76A116K68 , 69;  K60,  61 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

LOSE  ABILITY  TO  CLOSE  LT/RT  FU  TK  ISOL  B VALVE.  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LT/RT  FU  TK  ISOL  A & B (LT/RT)  VALVES 
FAILED  OPEN.  VALVES  ARE  NORMALLY  OPEN.  THE  ONLY  EFFECT  A FAILED 
OPEN  VALVE  COULD  HAVE  IS  AN  UNDESIRABLE  INTERCONNECT/CROSSFEED 
CONFIGURATION  TO  AFFECTED  POD  (DIRECT  CONNECTION  OF  TANKS).  OMS 
XFEED  CAN  STILL  BE  PERFORMED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14; 
MC284-0430  REV  E AMENDMENT  F-07 


REPORT  DATE  02/04/87 


C-396 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  495 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/lR 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (STUCK  IN  ENERGIZED  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/3 

TAL: 

3/lR 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 

] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  6 

, MCA 

3 

PART  NUMBER:  56V76A116K68, 

69; 

K60,  61 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

A FAILED  CLOSED  RELAY  K41  OR  42/K57  OR  58  (LT/RT)  HAS  NO  EFFECT 
ON  VALVE  OPERATION.  A FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  A 
CLOSURE  OF  FUEL  TANK  ISOL  VALVE  A & B (LT/RT). 

THIS  FAILURE  CAN  BE  CORRECTED  BY  PLACEMENT  OF  LT/RT  OMS  TK  ISOL 
SWITCH  A & B INTO  THE  OPEN  POSITION.  DURING  TIME  CRITICAL  ABORT 
DUMPS  AN  OME  SHUT  DOWN  COULD  OCCUR  BEFORE  PROPER  ACTION  IS 
TAKEN  AND  RESULT  IN  LOSS  OF  VEHICLE/LIFE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14; 

MC284-0430  REV  E AMENDMENT  F-07 


REPORT  DATE  02/04/87 


C-397 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM;  OMS 
MDAC  ID;  496 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT;  3/lR 


ITEM;  RELAY 

FAILURE  MODE;  FAILS  OPEN  (RELAY  FAILS  TO  ENERGIZE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION;  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116K66,  67;  K58,  59 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

A FAILED  OPEN  RELAY  K66  OR  67/K58  OR  59  (LT/RT)  HAS  NO  EFFECT  ON 
VALVE  OPERATION.  A FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  AN 
INABILITY  TO  OPEN  FU  TK  ISOL  VALVE'S  A & B (LT/RT). 

THIS  PRECLUDES  USE/DEPLETION  OF  OMS  PROP  RESULTING  IN  VIOLATION 
OF  STRUCTURAL  AND  MASS  PROPERTIES  CONSTRAINTS  DURING  ENTRY. 


REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14; 
MC284-0430  REV  E AMENDMENT  F-07 


REPORT  DATE  02/04/87 


C-398 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  497  ABORT:  3/3 

ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (STUCK  IN  ENERGIZED  POSITION) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116K66,  67;  K58,  59 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  CLOSE  LT/RT  FU  TK  ISOL  B VALVE.  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LT/RT  FU  TK  ISOL  A & B VALVES  FAILED  OPEN. 
VALVES  ARE  NORMALLY  OPEN.  THE  ONLY  EFFECT  A FAILED  OPEN 
VALVE  COULD  HAVE  IS  AN  UNDESIRABLE  INTERCONNECT/CROSSFEED 
CONFIGURATION  TO  AFFECTED  POD  (DIRECT  CONNECTION  OF  TANKS).  OMS 
XFEED  CAN  STILL  BE  PERFORMED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14; 

MC284-0430  REV  E AMENDMENT  F-07 


REPORT  DATE  02/04/87 


C-399 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/14/87 

OMS 

498 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/2R 


ITEM: 

FAILURE  MODE: 


RELAY 

FAILS  OPEN  (FAILS  TO  ENERGIZE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/2R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  54 V76A114K53 , K54; 

56V76A116K80, 

K81 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  AN  INABILITY  TO  CLOSE  THE  OX  TK  XFEED 
"A"  VALVE  AND  LOSS  OF  LT  & RT  RCS  CROSSFEED  CAPABILITY  DURING  AN 
OMS  BURN  TO  AVOID  A DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS. 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
CROSSFEED  CAPABILITY  (TO  AVOID  DIRECT  CONNECTION  OF  OMS  AND  RCS 
TANKS).  WITH  ONE  OMS  CROSSFEED  VALVE  FAILED  OPEN,  A SECOND 
FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE  WOULD  REQUIRE  THE  USE 
OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS  AND  RCS  TANKS. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-400 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  499  ABORT:  3/3 

ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (ENERGIZED) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ S AFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B C ] 

c [ ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  54V76A114K53 , K54;  56V76A116K80,  K81 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  REDUNDANT  RELAY  WILL  MAINTAIN  PROPER  CONTROL  TO  CLOSE  OX  TK 
XFEED  VLV  A. 

LOSS  OF  ALL  REDUNDANCY,  WORST  CASE,  WOULD  BE  A MOMENTARY  CLOSURE 
OF  XFEED  VLVS  A & B (LT/RT)  DURING  A BURN. 

PROPER  XFEED  OPERATION  CAN  BE  RESTORED  BY  PLACING  THE  OMS  XFEED  A 
OR  B (LT/RT)  SWITCH  IN  THE  OPEN  POSITION. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-401 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/14/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

500 

ABORT: 

3/lR 

ITEM: 

FAILURE  MODE 

RELAY 

::  FAILS  OPEN  (FAILS 

TO  ENERGIZE) 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/lR 

3/lR 

3/3 

3/2R 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  54V76A114K55,  K56; 

56V76A116K78, 

K79 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  LOSE  ONE  OF  TWO  ELECTRICAL  PATHS  TO  OPEN  LT/RT  OX  TK  XFEED 
VLV  A.  LOSS  OF  ALL  REDUNDANCY  HAS  THE  SAME  RESULT  AS  LT/RT  TK 
XFEED  VALVES  FAILING  CLOSED  (LOSS  OF  MISSION)  RESULTING  IN  LOSS 
OF  ENGINE  REDUNDANCY,  LOSS  OF  PROTECTION  AGAINST  SUBSEQUENT 
ENGINE  OR  PROP  FAILURES,  AND  LOSS  OF  CAPABILITY  TO  BALANCE  PROP 
WEIGHTS  BETWEEN  PODS  IF  PREVIOUS  FAILURE  REQUIRES  SUCH  ACTION. 
WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE  (FAILURE  TO 
OPEN  OF  PARALLEL  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  AND  COMPLETE  TIME 
CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  TK  STRUCTURAL  AND  MASS 
PROPERTY  VIOLATIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-402 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  501 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/2R 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (ENERGIZED) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C 

C P ] 

LOCATION:  AV  BAY 

6,  MCA  3 

PART  NUMBER:  54V76A114K55,  K56; 

56V76A116K78, 

K79 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  FAILED  OPEN  OX  TK  XFEED  "A"  VALVES  AND 
LOSS  OF  ANY  RCS  CROSSFEED  CAPABILITY  DURING  AN  OMS  BURN  TO  AVOID 
A DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS.  LOSS  OF  ALL  REDUNDANCY 
IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF  CROSSFEED  CAPABILITY 
TO  AVOID  DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS. 

A SECOND  FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE,  WOULD 
REQUIRE  THE  USE  OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS 
AND  RCS  TANKS. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-403 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/14/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

502 

ABORT: 

3/2R 

ITEM: 

FAILURE  MODE 

RELAY 

1:  FAILS  OPEN  (FAILS 

TO  ENERGIZE) 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

LOCATION:  AV  BAY  5, 

MCA  2 

PART  NUMBER:  55V76A115K47 , 46;  K55,  K54 


HDW/FUNC 

3/3 

3/3 

3/3 

3/2R 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  AN  INABILITY  TO  CLOSE  THE  OX  TK  XFEED 
"B"  VALVE  AND  LOSS  OF  LT  & RT  RCS  CROSSFEED  CAPABILITY  DURING  AN 
OMS  BURN  TO  AVOID  A DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS.  LOSS 
OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
CROSSFEED  CAPABILITY  (TO  AVOID  DIRECT  CONNECTION  OF  ALL  OMS  AND 
RCS  TANKS).  WITH  ONE  OMS  CROSSFEED  VALVE  FAILED  OPEN,  A SECOND 
FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE  WOULD  REQUIRE  THE  USE 
OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS  AND  RCS  TANKS. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-404 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  503  ABORT:  3/3 

ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (ENERGIZED) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 

:ght  phase 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ 


C [ ] 


LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115K47,  46;  K55,  K54 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  REDUNDANT  RELAY  WILL  MAINTAIN  PROPER  CONTROL  TO  CLOSE  OX  TK 
XFEED  VLV  B. 

LOSS  OF  ALL  REDUNDANCY,  WORST  CASE,  WOULD  BE  A MOMENTARY  CLOSURE 
OF  XFEED  VLV’S  A & B (LT/RT)  DURING  A BURN. 

PROPER  XFEED  OPERATION  CAN  BE  RESTORED  BY  PLACING  THE  OMS  XFEED  A 
OR  B (LT/RT)  SWITCH  IN  THE  OPEN  POSITION. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-405 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/14/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

504 

ABORT: 

3/lR 

ITEM: 

FAILURE  MODE 

RELAY 

::  FAILS  OPEN  (FAILS 

TO  ENERGIZE) 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 


1) 

ELECTRICAL  COMPONENTS 

2) 

CONTROLS 

3) 

PROP  STOR  & DIST 

SUBSYSTEM 

4) 

OX  TK  CROSSFEED  B VLVS 

5) 

RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/3 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P 3 

LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115K45,  44;  K53,  K52 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  LOSE  ONE  OF  TWO  ELECTRICAL  PATHS  TO  OPEN  LT/RT  OX  TK  XFEED 
VLV  B.  LOSS  OF  ALL  REDUNDANCY  HAS  THE  SAME  RESULT  AS  LT/RT  TK 
XFEED  VALVES  FAILING  CLOSED  (LOSS  OF  MISSION)  RESULTING  IN  LOSS 
OF  ENGINE  REDUNDANCY,  LOSS  OF  PROTECTION  AGAINST  SUBSEQUENT 
ENGINE  OR  PROP  FAILURES,  AND  LOSS  OF  CAPABILITY  TO  BALANCE  PROP 
WEIGHTS  BETWEEN  PODS  IF  PREVIOUS  FAILURE  REQUIRES  SUCH  ACTION. 
WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE  (FAILURE  TO 
TO  OPEN  OF  PARALLEL  VALVE)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  AND 
COMPLETE  TIME  CRITICAL  OMS  DUMP  RESULTING  IN  POSSIBLE  TK 
STRUCTURAL  AND  MASS  PROPERTY  VIOLATIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-406 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  505 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/2R 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (ENERGIZED) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/SAFING 

; 3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

5,  MCA  2 

PART  NUMBER:  55V76A115K45,  44; 

K53,  K52 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  FAILED  OPEN  OX  TK  XFEED  "B"  VALVES  AND 
LOSS  OF  ANY  RCS  CROSSFEED  CAPABILITY  DURING  AN  OMS  BURN  TO  AVOID 
A DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS.  LOSS  OF  ALL  REDUNDANCY 
IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF  CROSSFEED  CAPABILITY 
TO  AVOID  DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS. 

A SECOND  FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE,  WOULD 
REQUIRE  THE  USE  OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS 
AND  RCS  TANKS. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-407 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/3 

MDAC  ID: 

506 

ABORT: 

3/3 

ITEM: 

RELAY 

FAILURE  MODE 

1:  FAILS  OPEN  (RELAY 

FAILS  TO 

ENERGIZE) 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS 

LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114K45,  46;  K61,  62 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  CLOSE  LT/RT  OX  TK  ISO  A VALVE.  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LT/RT  OX  TK  ISO  A AND  B VALVES  FAILED  OPEN. 
VALVES  ARE  NORMALLY  OPEN.  THE  ONLY  EFFECT  A FAILED  OPEN 
VALVE  COULD  HAVE  IS  AN  UNDESIRABLE  INTERCONNECT/ CROSS FEED 
CONFIGURATION  TO  AFFECTED  POD  (DIRECT  CONNECTION  OF  TANKS).  OMS 
XFEED  CAN  STILL  BE  PERFORMED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 

MC284-0430  REV  E AMENDMENT  F-07  ' 


REPORT  DATE  02/04/87 


C-408 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM;  OMS 
MDAC  ID;  507 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/lR 


SiLURE  MODE;  FAILS  CLOSED  (STUCK  IN  ENERGIZED  POSITION) 
LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS; 

LIFTOFF;  3/3  TAL; 

ONORBIT;  3/3  AOA; 

DEORBIT;  3/3  ATO: 

LANDING/ SAFING:  3/3 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] B 


C [ ] 


LOCATION;  AV  BAY  4,  MCA  1 

PART  NUMBER;  54V76A114K45,  46;  K61,  62 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS /RATIONALE : 

A FAILED  CLOSED  RELAY  K45  OR  46/K61  OR  62  (LT/RT)  HAS  NO  EFFECT 
ON  VALVE  OPERATION.  A FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  A 
CLOSURE  OF  OX  TANK  ISOL  VALVE  A & B (LT/RT). 

THIS  FAILURE  CAN  BE  CORRECTED  BY  PLACEMENT  OF  LT/RT  OMS  TK  ISOL 
SWITCH  A & B INTO  THE  OPEN  POSITION.  DURING  TIME  CRITICAL  ABORT 
DUMPS  AN  OME  SHUT  DOWN  COULD  OCCUR  BEFORE  PROPER  ACTION  IS 
TAKEN  AND  RESULT  IN  LOSS  OF  VEHICLE/LIFE. 


REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14, 
MC284-0430  REV  E AMENDMENT  F-07 


REPORT  DATE  02/04/87 


C-409 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  508 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM;  RELAY 

FAILURE  MODE;  FAILS  OPEN  (RELAY  FAILS  TO  ENERGIZE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/lR 

ATO; 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

LOCATION:  AV  BAY  4 

, MCA  1 

PART  NUMBER;  54V76A114K47,  48; 

K63,  64 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

A FAILED  OPEN  RELAY  K47  OR  48/K63  OR  64  (LT/RT)  HAS  NO  EFFECT  ON 
VALVE  OPERATION.  A FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  AN 
INABILITY  TO  OPEN  OX  TANK  ISOL  VALVE  A & B (LT/RT) . 

THIS  PRECLUDES  USE/DEPLETION  OF  OMS  PROP  RESULTING  IN  VIOLATION 
OF  STRUCTURAL  AND  MASS  PROPERTIES  CONSTRAINTS  DURING  ENTRY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 

MC284-0430  REV  E AMENDMENT  F-07  ' 


REPORT  DATE  02/04/87 


C-410 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  509 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (STUCK  IN  ENERGIZED  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  A VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114K47,  48;  K63,  64 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  ABILITY  TO  CLOSE  LT/RT  OX  TK  ISO  A VALVE  (LT/RT).  LOSS  OF 
ALL  REDUNDANCY  RESULTS  IN  LT/RT  OX  TK  ISO  A AND  B VALVES  FAILED 
OPEN.  VALVES  ARE  NORMALLY  OPEN.  THE  ONLY  EFFECT  A FAILED  OPEN 
VALVE  COULD  HAVE  IS  AN  UNDESIRABLE  INTERCONNECT/CROSSFEED 
CONFIGURATION  TO  AFFECTED  POD  (DIRECT  CONNECTION  OF  TANKS).  OMS 
XFEED  CAN  STILL  BE  PERFORMED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14, 

MC284-0430  REV  E AMENDMENT  F-07 


REPORT  DATE  02/04/87 


C-411 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/3 

MDAC  ID: 

510 

ABORT: 

3/3 

ITEM: 

RELAY 

FAILURE  MODE:  FAILS  CLOSED 

(STUCK  IN  ENERGIZED  POSITION) 

LEAD  ANALYST:  V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116K70,  71;  K62,  63 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  CLOSE  LT/RT  OX  TK  B VALVE.  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LT/RT  OX  TK  ISOL  A AND  B VALVES  FAILED 
OPEN.  VALVES  ARE  NORMALLY  OPEN.  THE  ONLY  EFFECT  A FAILED  OPEN 
VALVE  COULD  HAVE  IS  AN  UNDESIRABLE  INTERCONNECT/ CROSS FEED 
CONFIGURATION  TO  AFFECTED  POD  (DIRECT  CONNECTION  OF  TANKS).  OMS 
XFEED  CAN  STILL  BE  PERFORMED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-412 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  511 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


FAILT^  MODE:  FAILS  OPEN  (RELAY  FAILS  TO  ENERGIZE) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/3 

3/3 

3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116K72 , 73;  K64,  65 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE:  

LOSE  ABILITY  TO  CLOSE  LT/RT  OX  TK  B VALVE.  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LT/RT  OX  TK  ISOL  A AND  B VALVES  FAILED 
OPEN.  VALVES  ARE  NORMALLY  OPEN.  THE  ONLY  EFFECT  A FAIMD  OPEN 
VALVE  COULD  HAVE  IS  AN  UNDESIRABLE  INTERCONNECT/CROSSFEED 
CONFIGURATION  TO  AFFECTED  POD  (DIRECT  CONNECTION  OF  TANKS).  OMS 
XFEED  CAN  STILL  BE  PERFORMED. 


REFERENCES: 


VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-413 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  512 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/lR 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  CLOSED  (STUCK  IN  ENERGIZED  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116K72 , 73;  K64,  65 

CAUSES!  CONTAMINATION,  VIBRATION,  PIECE  PART  PAIIBRE,  OVERLOAD 


EFFECTS/RATIONALE : 

RELAY  K72  OR  73/K65  OR  64  (LT/RT)  HAS  NO  EFFECT 
ON  VALVE  OPERATION.  A FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  A 
CLOSURE  OF  OX  TANK  ISOL  VALVE  A t B (M/RT).  * 

THIS  FAILURE  CAN  BE  CORRECTED  BY  PLACEMENT  OF  LT/RT  OMS  TK  Tsnr 
‘ B INTO  THE  OPEN  POSITION.  SL  tJmE  5*??icIl  lloRT 

COULD  OCCUR  BEFORE  PROPER  ACTION  IS 
TAKEN  AND  RESULT  IN  LOSS  OF  VEHICLE/LIFE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-414 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  513 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  OPEN  (RELAY  FAILS  TO  ENERGIZE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  B VLVS 

5)  RELAY 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, MCA  3 

PART  NUMBER:  56V76A116K70,  71;  K62,  63 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

A FAILED  OPEN  RELAY  K70  OR  71/K62  OR  63  (LT/RT)  HAS  NO  EFFECT  ON 
VALVE  OPERATION.  A FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  AN 
INABILITY  TO  OPEN  OX  TANK  ISOL  VALVE  A & B (LT/RT). 

THIS  PRECLUDES  USE/DEPLETION  OF  OMS  PROP  RESULTING  IN  VIOLATION 
OF  STRUCTURAL  AND  MASS  PROPERTIES  CONSTRAINTS  DURING  ENTRY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-415 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  514 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/lR 


ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF; 

3/3 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER:  54V76A114  Jl-94;  56V76A116  Jl-38 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

BARBER  POLE  TALKBACK  TO  CREW  FALSELY  INDICATES  THAT  EITHER  THE  OX 
VLV,  FU  VLV,  OR  BOTH  VLVS  ARE  FAILED  PARTIALLY  OPEN/ PART  I ALLY 
CLOSED.  GPC  TALKBACK  TO  CREW  STILL  OPERATIONAL. 

WORST  CASE  IS  VLVS  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLVS  ARE 
USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN 
FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  FALSELY  BE  FAILED  THE  RESULT  IS  LOSS  OF  VEHICLE/LIFE 
FOR  RTLS  & TAL. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-416 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/14/87 

OMS 

515 


ITEM: 

FAILURE  MODE: 


RESISTOR,  1.2K  1/4W 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CONTROLS 

PROP  STOR  & DIST  SUBSYSTEM 
FU  TK  CROSSFEED  A VLVS 
RESISTOR,  1.2K  1/4W 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A 

[ 

] 

B [ 

] 

c [ ] 

LOCATION:  AV  BAY  4, 

MCA 

1; 

AV  BAY  6, 

MCA  3 

PART  NUMBER:  54V76A114 

Jl- 

94; 

56V76A116 

Jl-38 

CAUSES:  CONTAMINATION, 

VIBRATION,  MECHANICAL 

SHOCK,  THERl 

SHOCK,  OVERLOAD 
EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-417 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  516 


ITEM:  RESISTOR,  12K  1/4W 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS: 

LOCATION:  AV  BAY  4 

PART  NUMBER:  54V76A1] 

CAUSES:  CONTAMINATION 

SHOCK,  OVERLOAD 


CRITICALITIES 

HDW/FUNC  ABORT  HDW/FUNC 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

[ ] 

B [ 

] 

c [ ] 

MCA  1; 

AV  BAY  6, 

MCA  3 

J3-43; 

56V76A116 

J3-10 

VIBRATION,  MECHANICAL  i 

SHOCK,  THERMAL 

EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-418 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/14/87 

OMS 

517 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/lR 


ITEM;  RESISTOR,  12K  1/4W 

FAILURE  MODE;  FAILS  SHORT 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING ; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL; 

3/2R 

AOA; 

3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS;  A [ 3 ] B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/3 


C [ P ] 


LOCATION;  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER;  54V76A114  J3-43;  56V76A116  J3-10 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS /RATIONAIjE  • 

SWITCH  TALKBACK  TO  GPC  CONTINUALLY  INDICATE  LT/RT  FU  VALVE  A DOES 
NOT  OPEN.  BARBER  POLE  TALKBACK  TO  CREW  STILL  OPERATIONAL. 

WORST  CASE  IS  VLV  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLV  IS 
USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN 
FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  ^D  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  FALSELY  BE  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  & TAL. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-419 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  518 

ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/lR 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  AB 

3/3 
3/3 
3/2R 
3/3 
3/3 


ABORT 

HDW/FUNC 

RTLS: 

3/lR 

TAL: 

3/lR 

AOA: 

3/3 

ATO: 

3/3 

[ P ] 

C [ P ] 

REDUNDANCY  SCREENS;  A[3]  B[P]  C[P] 

LOCATION;  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER;  54V76A114  J3-43;  56V76A116  J3-10 

MOCKf'ovSlOM^*^^^^°*^'  MECHANICAL  SHOCK,  THERMAL 

EFFECTS/RATIONALE : 

SWITCH  TALKBACK  TO  GPC  CONTINUALLY  INDICATE  LT/RT  FU  VALVE  A DOES 

talkback  to  crew  still  opeiStion^ 

DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLV  IS 
warewTv  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN 

XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
FALSELY  BE  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/ LIFE  FOR  RTLS  & TAL. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-420 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/14/87 

OMS 

519 


HIGHEST  CRITICALITY 
FLIGHT; 

abort: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE;  FAILS  SHORT 


lead  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD: 


D.J.  PAUL 


breakdown  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL; 

AOA: 

ATO; 


REDUNDANCY  SCREENS;  A [ 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION; 
PART  NUMBER; 


AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 
54V76A114  J3-43;  56V76A116  J3-10 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-421 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  520 

ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT:  3/lR 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS; 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/2R 

3/3 

3/3 


RTLS; 

TAL: 

AOA: 

ATO; 


B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/3 


[ P ] 


LOCATION: 
PART  NUMBER; 


AV  BAY  5,  MCA  2 
55V76A115  J2-52;  J2-73 


mechanical  SHOCK,  THERMAL 

EFFECTS/RATIONALE : 

TALKBACK  TO  CREW  FALSELY  INDICATES  THAT  EITHER  THE  OX 
AEE  FAILED  PAETIAilY  OPEN/P^LJl? 

talkback  to  crew  still  operational. 

VLVS  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLVS  ARE 

?aSel?  REDUNDAScf  ?2Sl^ LISS 

^ FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OP 

XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE  * 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS  BUT  STNPP  'twt? 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-422 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  521 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/3  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J2-52;  J2-73 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-423 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM;  OMS 
MDAC  ID;  522 


ITEM;  RESISTOR,  12K  1/4W 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS;  A 

[ ] 

B 

[ ] 

c [ ] 

LOCATION;  AV  BAY  4, 

MCA  1; 

AV  BAY 

6,  MCA  3 

PART  NUMBER;  55V76A115 

J3-56; 

J3-41 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-424 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


date:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  523 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/lR 


ITEM:  RESISTOR,  12K  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER:  55V76A115  J3-56;  J3-41 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE: 

SWITCH  TALKBACK  TO  GPC  CONTINUALLY  INDICATE  LT/RT  FU  VALVE  B DOES 
NOT  OPEN.  BARBER  POLE  TALKBACK  TO  CREW  STILL  OPERATIONAL. 

WORST  CASE  IS  VLV  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLV  IS 
USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN 
FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  FALSELY  BE  FAILED  CLOSE  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  & TAL. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-425 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/14/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

524 

ABORT; 

3/lR 

ITEM; 

FAILURE  MODE 

RESISTOR,  5. IK 
;:  FAILS  OPEN 

1/4W 

LEAD  ANALYST 

; V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/lR 

LIFTOFF; 

3/3 

TAL; 

3/lR 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY  5 

, MCA  2 

PART  NUMBER;  55V76A115  J3-56;  J3-41 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE ; 

SWITCH  TALKBACK  TO  GPC  CONTINUALLY  INDICATE  LT/RT  FU  VALVE  B DOES 
NOT  OPEN.  BARBER  POLE  TALKBACK  TO  CREW  STILL  OPERATIONAL. 

WORST  CASE  IS  VLV  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLV  IS 
USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN 
FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  FALSELY  BE  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  & TAL. 

REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-426 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  525 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J3-56;  J3-41 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-427 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  526 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  A VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


LOCATION: 
PART  NUMBER: 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 3 ] 
, MCA  1 

B [ P ] 

C [ P ] 

54V76A114  Jl-24;  Jl-21 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

CREW  LT/RT  OMS  ISOL  A POSITION  INDICATION  DS5/DS7  WOULD  FALSELY 
SHOW  A BARBERPOLE  INDICATING  EITHER  THE  FUEL  OR  OX  "A”  VALVES  ARE 
STUCK  PARTIALLY  OPEN/CLOSE  OR  THERE  IS  A POSITION  MISMATCH 
BETWEEN  THE  TWO  VALVES. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS  (ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE) . 

REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-428 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  527 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  A VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114  Jl-24;  Jl-21 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACKS  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-429 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

528 

ABORT: 

3/3 

ITEM; 

RESISTOR,  12K  1/4W 

FAILURE  MODE 

i;  FAILS  SHORT 

LEAD  ANALYST 

';  V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  A VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TALI 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY  4,  MCA  1 

PART  NUMBER;  54V76A114  J3-28;  J3-74 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ASSOCIATED  VALVE  TALKBACK  TO  GPC  (LT/RT) , CREW  BARBERPOLE 
TALKBACK  STILL  AVAILABLE.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS 
OF  TALKBACK  TO  GPC  AND  CREW  FOR  OX  TK  ISOL  VALVES  A & B. 

WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B VALVE  CLOSED 
RESULTING  IN  A LOSS  OF  MISSION  DUE  TO  SAFETY  CONSIDERATIONS  (ONE 
FAILURE  FROM  LOSS  OF  VEHICLE  CREW). 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-430 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/13/87 

OMS 

529 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM;  RESISTOR,  12K  1/4W 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  A VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

LIFTOFF: 

ONORBIT: 

DEORBIT: 

LANDING/ SAFING : 

REDUNDANCY  SCREENS;  A 


3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO; 

3/3 

[ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114  J3-28;  J3-74 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  VALVE  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-431 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87 

SUBSYSTEM;  OMS 
MDAC  ID:  530 

ITEM:  RESISTOR,  5.1K  1/4W 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  A VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT:  3/3 


FLIGHT  PHASE  HDW/FUN 

PRELAUNCH;  3/3 

LIFTOFF;  3/3 

ONORBIT;  3/2R 

DEORBIT;  3/3 

LANDING/SAFING;  3/3 

REDUNDANCY  SCREENS;  A [ 3 ] 

LOCATION;  AV  BAY  4.  MCA  1 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ 3 ] 
, MCA  1 

B [ P ] 

C [ P ] 

VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

onUUJx,  UVERl^AD 

EFFECTS/RATIONALE ; 

TALKBACK  TO  GPC  (LT/RT) , CREW  BARBERPOLE 
STILL  AVAILABLE.  A LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
LOSS  OF  TALKBACK  TO  GPC  AND  CREW  FOR  OX  TK  ISOL  VALVES  A Se  B 
WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B VALVE  CLOSED 

^ LOSS  OF  MISSION  DUE  TO  SAFETY  CONSIDERATIONS  (ONE 
FAILURE  FROM  LOSS  OF  VEHICLE  CREW) . ^ 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-432 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  OMS  FLIGHT:  3/3 

MDAC  ID:  531  ABORT;  3/3 

ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  A VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114  J3-28;  J3-74 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE ; 

NONE,  VALVE  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-433 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT; 

3/2R 

MDAC  ID: 

532 

ABORT; 

3/3 

ITEM; 

RESISTOR,  1.2K  2W 

FAILURE  MODE 

;:  FAILS  OPEN 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  B VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, MCA  3 

PART  NUMBER:  56V76A116  Jl-88;  Jl-42 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

CREW  LT/RT  OMS  ISOL  B POSITION  INDICATION  DS6/DS8  WOULD  FALSELY 
SHOW  A BARBERPOLE  INDICATING  EITHER  THE  FUEL  OR  OX  ''B”  VALVES  ARE 
STUCK  PARTIALLY  OPEN/CLOSE  OR  THERE  IS  A POSITION  MISMATCH 
BETWEEN  THE  TWO  VALVES. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS  (ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE) . 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-434 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  533  ABORT:  3/3 

ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  B VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-88;  Jl-42 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACKS  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-435 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  534 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  12K  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  B VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-69;  J3-54 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-436 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/2R 

MDAC  ID:  535  ABORT:  3/3 

ITEM:  RESISTOR,  12K  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  B VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-69;  J3-54 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ASSOCIATED  VALVE  TALKBACK  TO  GPC  (LT/RT) , CREW  BARBERPOLE 
TALKBACK  STILL  AVAILABLE.  A LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
LOSS  OF  TALKBACK  TO  GPC  AND  CREW  FOR  OX  TK  ISOL  VALVES  A & B. 
WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B VALVE  CLOSED 
RESULTING  IN  A LOSS  OF  MISSION  DUE  TO  SAFETY  CONSIDERATIONS  (ONE 
FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/ CREW) . 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-437 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  536  ABORT:  3/3 

ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-69;  J3-54 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-438 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

date:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/2R 

MDAC  ID:  537  ABORT:  3/3 

ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  FU  TK  ISOL  B VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-69;  J3-54 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ASSOCIATED  VALVE  TALKBACK  TO  GPC  (LT/RT) , CREW  BARBERPOLE 
TALKBACK  STILL  AVAILABLE.  A LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
LOSS  OF  TALKBACK  TO  GPC  AND  CREW  FOR  OX  TK  ISOL  VALVES  A & B. 
WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B VALVE  CLOSED 
RESULTING  IN  A LOSS  OF  MISSION  DUE  TO  SAFETY  CONSIDERATIONS  (ONE 
FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/ CREW) . 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-439 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  538 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/lR 


ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS: 

LOCATION:  AV  BAY  4 

PART  NUMBER:  54V76A11 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/lR 

3/3 

TAL: 

3/lR 

3/2R 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A t 3 ] 

B [ P ] 

C [ P ] 

, MCA  1;  AV 

BAY  6,  MCA  3 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

SWITCH  TALKBACK  TO  GPC  CONTINUALLY  INDICATES  LT/RT  OX  AND  FU 
VALVE  A STUCK  PARTIALLY  OPEN/ PARTIALLY  CLOSED.  BARBER  POLE 
TALKBACK  TO  CREW  STILL  OPERATIONAL. 

WORST  CASE  IS  VLVS  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLVS  ARE 
USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN 
FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  FALSELY  BE  FAILED  THE  RESULT  IS  LOSS  OF  VEHICLE/LIFE 
FOR  RTLS  & TAL. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-440 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/14/87 

OMS 

539 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD: 


D.J.  PAUL 


breakdown  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ S AFING ; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER:  54V76A114  Jl-60;  56V76A116  Jl-77 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-441 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  540 


ITEM: 

FAILURE  MODE: 


RESISTOR,  5.  IK  1/4W 
FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

breakdown  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS; 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ ] 

B 1 ] 

c [ ] 

LOCATION: 
PART  NUMBER: 


AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 
54V76A114  Jl-46;  56V76A116  Jl-57 


CAUSES:  CONTAMINATION, 

SHOCK,  OVERLOAD 


VIBRATION,  MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE : 

LOSE  LT/RT  XFEED  A SWITCH  CLOSED  TALKBACK  LOS' 
^DONDANCY  WOULD  RESULT  IN  HAVING  TO^LY  ON^L 
DETERMINE  SWITCH  “CLOSE"  OPERATIONS. 


OF  ALL 
TALKBACKS  TO 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-442 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

date:  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  541  ABORT:  3/3 

ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER:  54V76A114  Jl-46;  56V76A116  Jl-57 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  SWITCH  POSITION  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-443 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  542 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FtJNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER:  54V76A114  Jl-35;  56V76A116  Jl-56 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

WOULD  FALSELY  INDICATE  LOSS  OF  ONE  OF  TWO  REDUNDANT  ELECTRICAL 
PATHS  TO  OVERRIDE  THE  GPC  AND  OPEN  OX  AND  FU  TK  XFEED  VLVS  A. 
LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  HAVING  TO  RELY  ON  VLV 
TALKBACKS  TO  DETERMINE  SWITCH  "OPEN"  OPERATION. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-444 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  543 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/3  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER;  54V76A114  Jl-35;  56V76A116  Jl-56 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  SWITCH  POSITION  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-445 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  544 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/lR 


ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 

LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J2-62;  J2-68 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK, 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE : 

SWITCH  TALKBACK  TO  GPC  CONTINUALLY  INDICATES  LT/RT  OX  AND  FU 
® STUCK  PARTIALLY  OPEN/ PARTIALLY  CLOSED.  BARBER  POLE 
TALKBACK  TO  CREW  STILL  OPERATIONAL. 

VLVS  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLVS  ARE 

mtowtS  xfeed.  loss  of  all  redundancy  could  result  in 

I^AISELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 

PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  BE  FALSELY  FAILED  THE  RESULT  IS  LOSS  OF  VEHICLE/LIFE 
FOR  RTLS  & TAL. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-446 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

date:  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  545  ABORT:  3/3 

ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J2-62;  J2-68 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-447 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  546 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL: 

ONORBIT; 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING; 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ ] C [ 

LOCATION;  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J2-30;  J2-40 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  LT/RT  XFEED  B SWITCH  CLOSED  TALKBACK.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  HAVING  TO  RELY  ON  VLV  TALKBACKS  TO 
DETERMINE  SWITCH  "CLOSE''  OPERATION. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-448 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  547  ABORT:  3/3 

ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B C ] 

t — 1 

u 

LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J2-30;  J2-40 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  SWITCH  POSITION  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-449 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  548 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ ] C [ 

LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J2-21;  J2-45 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

WOULD  FALSELY  INDICATE  LOSS  OF  ONE  OF  TWO  REDUNDANT  ELECTRICAL 
PATHS  TO  OVERRIDE  THE  GPC  AND  OPEN  OX  AND  FU  TK  XFEED  VLVS  B. 
LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  HAVING  TO  RELY  ON  VLV 
TALKBACKS  TO  DETERMINE  SWITCH  "OPEN”  OPERATION. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-450 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  549 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  i DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J2-21;  J2-45 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE:  

NONE,  SWITCH  POSITION  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-451 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  550 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ ] - 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114  Jl-8;  Jl-98 


CAUSES:  CONTAMINATION, 

SHOCK,  OVERLOAD 


VIBRATION,  MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE : 

LOSE  (LT/RT)  OMS  TK  ISOL  A SWITCH  POSITION  (CLOSE) 
SWITCH  POSITION  CAN  BE  DETERMINED  UTILIZING  A VALVl 
TALKBACKS • 


TALKBACK. 

POSITION 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-452 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT;  3/3 

MDAC  ID:  551  ABORT;  3/3 

ITEM;  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114  Jl-8;  Jl-98 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  SWITCH  POSITION  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-453 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT; 

3/3 

MDAC  ID; 

552 

ABORT; 

3/3 

ITEM; 

FAILURE  MODE 

RESISTOR,  5. IK 
; FAILS  OPEN 

1/4W 

LEAD  ANALYST 

; V.J.  BURKEMPER 

SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 


PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS;  A 

[ 

3 B [ 

] 

c [ ] 

LOCATION;  AV  BAY  4, 

MCA 

1 

PART  NUMBER;  54V76A114 

Jl- 

16;  Jl-95 

CAUSES;  CONTAMINATION, 

VIBRATION,  MECHANICAL 

SHOCK,  THERMAL 

SHOCK,  OVERLOAD 
EFFECTS/RATIONALE ; 

LOSE  (LT/RT)  OMS  TK  ISOL  A SWITCH  POSITION  (OPEN)  TALKBACK. 
SWITCH  POSITION  CAN  BE  DETERMINED  UTILIZING  A VALVE  POSITION 
TALKBACK. 


REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-454 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM;  OMS 
MDAC  ID;  553 

ITEM;  RESISTOR^  5. IK  1/4W 

FAILURE  MODE;  FAILS  SHORT 

LEAD  ANALYST;  V.J.  BURKEMPER 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


SUBSYS  LEAD;  D.J.  PAUL 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 


HDW/FUNC 
3/3 
3/3 
3/3 
3/3 


CRITICALITIES 


ABORT 

RTLS; 

TAL; 

AOA; 

ATO; 


LANDING/SAFING;  3/3 
REDUNDANCY  SCREENS;  A [ ] 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION;  AV  BAY  4,  MCA  1 

PART  NUMBER;  54V76A114  Jl-16;  Jl-95 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

TAILBACK  STILL  AVAIIABI^. 


REFEREHCES:  VS70-943099  EEV  A EO  B12,  VS70-976102  REV  F EO  G14 


report  date  02/04/87 


C-455 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

1/13/87 
OMS 
554 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

failure  MODE: 


HDW/FUNC 

3/3 

3/3 


RESISTOR,  5.  IK  1/4W 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


SUBSYS  LEAD:  D.J.  PAUL 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

redundancy  SCREENS: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

A [ ] 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


MOTION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-14;  J3-12 

SHOCKf*OVERLO^^^^'^^°^'  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
EFFECTS/RATIONALE : 

SWITCH^POSITION^C^  BE  ^I^TElSS^^D  (CLOSE)  TALKBACK. 

TALKBACKS.  DETERMINED  UTILIZING  B VALVE  POSITION 


REFERENCES: 


VS70-943099  REV  A EO  B12; 


VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-456 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  555 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION;  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-14;  J3-12 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACKS  STILL  AVAILABLE. 


REFERENCES;  VS70-943099  REV  A EO  B12;  VS70~976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-457 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  556 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A 


B [ ] C [ ] 


LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER;  56V76A116  Jl-18;  J3-11 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  (LT/RT)  OMS  TK  ISOL  B SWITCH  POSITION  TALKBACK.  SWITCH 
POSITION  CAN  BE  DETERMINED  UTILIZING  B VALVE  POSITION  TALKBACK. 


REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-458 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID;  557 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM;  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER;  56V76A116  Jl-18;  J3-11 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  SWITCH  POSITION  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-459 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM;  OMS 
MDAC  ID:  558 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/2R 

3/lR 


ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/lR 

LIFTOFF; 

3/3 

TAL: 

3/lR 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER;  54V76A114  Jl-67;  56V76A116  Jl-28 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

BARBER  POLE  TALKBACK  TO  CREW  FALSELY  INDICATES  THAT  EITHER  THE  OX 
VLV,  FU  VLV,  OR  BOTH  VLVS  ARE  FAILED  PARTIALLY  OPEN/ PARTIALLY 
CLOSED.  GPC  TALKBACK  TO  CREW  STILL  OPERATIONAL. 

WORST  CASE  IS  VLVS  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLVS  ARE 
USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN 
FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  BE  FALSELY  FAILED  THE  RESULT  IS  LOSS  OF  VEHICLE/LIFE 
FOR  RTLS  & TAL. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-460 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM;  OMS 
MDAC  ID;  559 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  3/3 


ITEM;  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A t ] 

B [ ] 

c [ ]• 

LOCATION;  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER;  54V76A114  Jl-67;  56V76A116  Jl-28 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-461 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  560 


ITEM:  RESISTOR,  12K  1/4W 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 

REDUNDANCY  SCREENS: 

LOCATION:  AV  BAY  4 


SHOCK,  OVERLOAD 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

[ ] 

B [ 

] 

■ C [ ] 

MCA  1; 

AV  BAY  6, 

MCA  3 

J3-42; 

56V76A116 

J3-29 

VIBRATION,  MECHANICAL  l 

SHOCK,  THERMAL 

EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-462 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  561 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/lR 


ITEM:  RESISTOR,  12K  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ S AFING : 

3/3 

HDW/FUNC 

3/lR 

3/lR 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


C [ P ] 


LOCATION:  AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 

PART  NUMBER:  54V76A114  J3-42;  56V76A116  J3-29 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

SWITCH  TALKBACK  TO  GPC  CONTINUALLY  INDICATE  LT/RT  OX  VALVE  A DOES 
NOT  OPEN.  BARBER  POLE  TALKBACK  TO  CREW  STILL  OPERATIONAL. 

WORST  CASE  IS  VLV  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLV  IS 
USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN 
FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  BE  FALSELY  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  & TAL. 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-463 


INDEPENDENT  ORBITER  ASSESSMENT 


ORBITER  SUBSYSTEM 

ANALYSIS  WORKSHEET 

DATE; 

1/14/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT; 

3/2R 

MDAC  ID: 

562 

ABORT: 

3/lR 

ITEM; 

RESISTOR,  5.  IK 

1/4W 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER 

SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF; 

3/3 

TAL; 

3/lR 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B 

[ P ] 

c [ p 3 

LOCATION:  AV  BAY  4 

, MCA  1; 

AV  BAY 

6,  MCA  3 

PART  NUMBER;  54V76A114  J3-42; 

56V76A116  J3-29 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE ; 

SWITCH  TALKBACK  TO  GPC  CONTINUALLY  INDICATES  LT/RT  OX  VALVE  A 
DOES  NOT  OPEN.  BARBER  POLE  TALKBACK  TO  CREW  STILL  OPERATIONAL. 
WORST  CASE  IS  VLV  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLV  IS 
USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN 
FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  BE  FALSELY  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  & TAL. 

REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-464 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/14/87 

OMS 

563 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD: 


D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  A VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION: 
PART  NUMBER: 


AV  BAY  4,  MCA  1;  AV  BAY  6,  MCA  3 
54V76A114  J3-42;  56V76A116  J3-29 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


report  date  02/04/87 


C-465 


HDW/FUNC 

3/2R 

3/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 


Anuiii'fiNDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


1/14/87 

OMS 

564 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


ITEM: 

FAILURE  MODE; 


RESISTOR,  1.2K  1/4W 
FAILS  OPEN 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/SAFING; 

REDUNDANCY  SCREENS; 


CRITICALITIES 


hdw/func 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

hdw/func 

3/lR 

3/lR 

3/3 

3/3 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION: 
PART  NUMBER: 


AV  BAY  5,  MCA  2 
55V76A115  J2-65;  J2-83 


CAUSES:  CONTAMINATION, 

SHOCK,  OVERLOAD 


VIBRATION,  MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE : 

VL either  the  ox 

USED  TO  COMPLETE  CIOSED  AND  REDUNDANT  VLVS  ARE 

FALiELY  XPEED^?It?S  RESULT  “ 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-466 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

date:  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  565  ABORT:  3/3 

ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J2-65;  J2-83 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-467 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM;  OMS 
MDAC  ID:  566 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM;  RESISTOR,  12K  1/4W 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL: 

ONORBIT; 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO; 

LANDING/S AFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] B [ ] 

LOCATION;  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J3-55;  J3-40 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-468 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  567 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/lR 


ITEM:  RESISTOR,  12K  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS;  A [ 3 ] B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J3-55;  J3-40 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


switS^tSkback^o  gpc  continually  indicates  lt/rt 

DOES  NOT  OPEN.  BARBER  POLE  TALKBACK  TO  ‘ 

worst  case  is  vlv  declared  failed  closed  and  redundant  vlv  is 

USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  ^°U^D^CY  COUM 
FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  lOSS  OF  MISSION. 

DURING  ABORTS  THE  XFEED  SHOULD  NOT  DECI^D  FAI^  ^NCE  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  BE  FALSELY  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  fit  TAL. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-469 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  568 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM:  RESISTOR,  5.1K  1/4W 

FAILURE  MODE:  FAILS  OPEN 


HDW/FUNC 

3/2R 

3/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

redundancy  SCREENS:  A [ 3 ] ] 

LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J3-55;  J3-40 


HDW/FUNC 

3/lR 

3/lR 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION, 

SHOCK,  OVERLOAD 


VIBRATION,  MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE : 

TALKBACK  TO  GPC  CONTINUALLY  INDICATES  LT/RT  OX  VALVE  R 

OPeAt^OnIl. 

TTo^  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLV  IS 

FaSeLY  FAILTNG^THE^Y^Pirn^^®  ^ REDUNDANCY  COULD  RESULT  IN 
FALSELY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OE 

DTOIHG  ABORTS  THE  XFEED  SHOUU3  NOT  BE  DECtA^D  pIlI^D  MD  THE 

take  place  regardless  op  INDICATIONS,  BUT  SINCE  THE 

$SfcL^%SE“po5^^TS’'/*TiS°  RESULT^is^Ssi^S?" 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-470 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  569  ABORT:  3/3 

ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  CROSSFEED  B VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  5,  MCA  2 

PART  NUMBER:  55V76A115  J3-55;  J3-40 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-471 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

570 

ABORT; 

3/3 

ITEM: 

RESISTOR,  1.2K  2W 

FAILURE  MODE 

::  FAILS  OPEN 

LEAD  ANALYST 

V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 


2) 

CONTROLS 

3) 

PROP  STOR  & DIST  SUBSYSTEM 

4) 

OX  TK  ISOL  A VLVS 

5) 

RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS;  i 

\ [ 3 ] B 

C P ] 

C [ P ] 

LOCATION:  AV  BAY  4, 

MCA  1 

PART 

NUMBER;  54V76A114 

Jl-6;  Jl-32 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

CREW  LT/RT  OMS  ISOL  A POSITION  INDICATION  DS5/DS7  WOULD  FALSELY 
SHOW  A BARBERPOLE  INDICATING  EITHER  THE  FUEL  OR  OX  "A"  VALVES  ARE 
STUCK  PARTIALLY  OPEN/CLOSE  OR  THERE  IS  A POSITION  MISMATCH 
BETWEEN  THE  TWO  VALVES. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS  (ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE) . 

REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-472 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  571 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  A VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

LIFTOFF: 

ONORBIT: 

DEORBIT: 

LANDING/SAFING: 

REDUNDANCY  SCREENS:  A 


3/3 

RTLS: 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

[ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114  Jl-6;  Jl-32 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACKS  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-473 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  572 

ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  A VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


FLIGHT  PHASE  HDW/P 

PRELAUNCH:  3/3 

LIFTOFF:  3/3 

ONORBIT:  3/2 

DEORBIT:  3/3 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ : 

LOCATION:  AV  BAY  4.  MCA 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 3 ] 
, MCA  1 

B [ P ] 

C [ P ] 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ASSOCIATED  VALVE  TALKBACK  TO  GPC  (LT/RT) , CREW  BARBER  POLE 
TALKBACK  STILL  AVAILABLE.  A LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
LOSS  OF  TALKBACK  TO  GPC  AND  CREW  FOR  OX  TK  ISOL  VALVES  A & B 
WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B VALVE  CLOSED 
RESULTING  IN  A LOSS  OF  MISSION  DUE  TO  SAFETY  CONSIDERATIONS  fONE 
FAILURE  FROM  LOSS  OF  VEHICLE/CREW). 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-474 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  573 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  A VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

LIFTOFF; 

ONORBIT: 

DEORBIT: 

LANDING/ SAFING; 

REDUNDANCY  SCREENS;  A 


3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

[ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION;  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114  Jl-18;  Jl-39 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-475 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT: 

3/3 

MDAC  ID: 

574 

ABORT: 

3/3 

ITEM; 

RESISTOR,  12K  1/4W 

FAILURE  MODE 

; FAILS  OPEN 

LEAD  ANALYST 

; V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  A VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT; 

3/3 

AOA: 

DEORBIT; 

3/3 

ATO: 

LANDING/SAFING; 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] B [ 

LOCATION;  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114  J3-27;  J3-75 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  VALVE  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-476 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/13/87 

OMS 

575 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


RESISTOR,  12K  1/4W 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  A VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114  J3-27;  J3-75 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING; 

REDUNDANCY  SCREENS: 


3/3 

RTLS: 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

A [ 3 ] B [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ASSOCIATED  VALVE  TALKBACK  TO  GPC  (LT/RT) , CREW  BARBER  POLE 
TALKBACK  STILL  AVAILABLE.  A LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
LOSS  OF  TALKBACK  TO  GPC  AND  CREW  FOR  OX  TK  ISOL  VALVES  A & B. 
WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B VALVE  CLOSED 
RESULTING  IN  A LOSS  OF  MISSION  DUE  TO  SAFETY  CONSIDERATIONS  (ONE 
FAILURE  FROM  LOSS  OF  VEHICLE/ CREW) . 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-477 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT; 

3/2R 

MDAC  ID; 

576 

ABORT; 

3/3 

ITEM; 

FAILURE  MODE 

RESISTOR,  5. IK 
; FAILS  OPEN 

1/4W 

LEAD  ANALYST 

; V.J.  BURKEMPER 

SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 


2) 

CONTROLS 

3) 

PROP  STOR  & DIST 

SUBSYSTEM 

4) 

OX  TK  ISOL  A VLVS 

5) 

RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AO  A; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY  4 

, MCA  1 

PART  NUMBER;  54V76A114  J3-27;  J3-75 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  ASSOCIATED  VALVE  TALKBACK  TO  GPC  (LT/RT) , CREW  BARBER  POLE 
TALKBACK  STILL  AVAILABLE.  A LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
LOSS  OF  TALKBACK  TO  GPC  AND  CREW  FOR  OX  TK  ISOL  VALVES  A & B. 
WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B VALVE  CLOSED 
RESULTING  IN  A LOSS  OF  MISSION  DUE  TO  SAFETY  CONSIDERATIONS  fONE 
FAILURE  FROM  LOSS  OF  VEHICLE/CREW). 


REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-478 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

date:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  577  ABORT:  3/3 

ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  A VLVS 

5)  RESISTOR,  5.  IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  4,  MCA  1 

PART  NUMBER:  54V76A114  J3-27;  J3-75 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-479 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  578 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 


1) 

ELECTRICAL  COMPONENTS 

2) 

CONTROLS 

3) 

PROP  STOR  & DIST 

SUBSYSTEM 

4) 

OX  TK  ISOL  B VLVS 

5) 

RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, MCA  3 

PART  NUMBER:  56V76A116  Jl-72;  Jl-40 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ASSOCIATED  VALVE  TALKBACK  TO  GPC  (LT/RT) , CREW  BARBERPOLE 
TALKBACK  STILL  AVAILABLE.  A LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
LOSS  OF  TALKBACK  TO  GPC  AND  CREW  FOR  OX  TK  ISOL  VALVES  A & B. 
WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B VALVE  CLOSED 
RESULTING  IN  A LOSS  OF  MISSION  DUE  TO  SAFETY  CONSIDERATIONS  (ONE 
FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/CREW). 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-480 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  579 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  1.2K  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  B VLVS 

5)  RESISTOR,  1.2K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

LIFTOFF; 

ONORBIT: 

DEORBIT: 

LANDING/ SAFING : 

REDUNDANCY  SCREENS:  A 


3/3 

RTLS 

3/3 

TAL; 

3/3 

AO  A: 

3/3 

ATO; 

3/3 

[ 3 B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION;  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-72;  Jl-40 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-481 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  580 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  B VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING  : 

REDUNDANCY  SCREENS: 


CRITICALITIES 


LOCATION: 
PART  NUMBER: 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 3 ] 
, MCA  3 

B [ P ] 

C [ P ] 

56V76A116  Jl-98;  Jl-43 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

CREW  LT/RT  OMS  ISOL  B POSITION  INDICATION  DS6/DS8  WOULD  FALSELY 
SHOW  A BARBERPOLE  INDICATING  EITHER  THE  FUEL  OR  OX  "B"  VALVES  ARE 
STUCK  PARTIALLY  OPEN/CLOSE  OR  THERE  IS  A POSITION  MISMATCH 
BETWEEN  THE  TWO  VALVES. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS  (ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE) . 

REFERENCES;  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-482 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  581  ABORT:  3/3 

ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  B VLVS 

5)  RESISTOR,  1.2K  2W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-98;  Jl-43 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACKS  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-483 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/3 

MDAC  ID: 

582 

ABORT: 

3/3 

ITEM: 

RESISTOR,  12K  1/4W 

FAILURE  MODE 

: FAILS  OPEN 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  B VLVS 

5)  RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A 

[ 

] B [ 

] 

c [ ] 

LOCATION:  AV  BAY  6, 

MCA 

3 

PART  NUMBER:  56V76A116 

Jl- 

46;  J3-55 

CAUSES:  CONTAMINATION, 

VIBRATION,  MECHANICAL 

SHOCK,  THERMAL 

SHOCK,  OVERLOAD 
EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-484 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/13/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT; 

3/2R 

MDAC  ID: 

583 

ABORT: 

3/3 

ITEM: 

RESISTOR,  12K  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 


1) 

ELECTRICAL  COMPONENTS 

2) 

CONTROLS 

3) 

PROP  STOR  & DIST 

SUBSYSTEM 

4) 

OX  TK  ISOL  B VLVS 

5) 

RESISTOR,  12K  1/4W 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FXmC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING 

: 3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY 

6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-46;  J3-55 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ASSOCIATED  VALVE  TALKBACK  TO  GPC  (LT/RT) , CREW  BARBERPOLE 
TALKBACK  STILL  AVAILABLE.  A LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
LOSS  OF  TALKBACK  TO  GPC  AND  CREW  FOR  OX  TK  ISOL  VALVES  A & B. 
WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B VALVE  CLOSED 
RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY  CONSIDERATIONS  (ONE 
FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/CREW). 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-485 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/13/87 

OMS 

584 


ITEM: 

FAILURE  MODE: 


RESISTOR,  5.  IK  1/4W 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CONTROLS 

PROP  STOR  & DIST  SUBSYSTEM 
OX  TK  ISOL  B VLVS 
RESISTOR,  5. IK  1/4W 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


LOCATION: 
PART  NUMBER: 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A [ 3 ] 

• B [ P ] 

C [ P 3 

, MCA  3 

56V76A116  Jl-46;  J3-55 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ASSOCIATED  VALVE  TALKBACK  TO  GPC  (LT/RT) , CREW  BARBERPOLE 
TALKBACK  STILL  AVAILABLE.  A LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
LOSS  OF  TALKBACK  TO  GPC  AND  CREW  FOR  OX  TK  ISOL  VALVES  A & B. 
WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B VALVE  CLOSED 
RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY  CONSIDERATIONS  (ONE 
FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/CREW). 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-486 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/13/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  585  ABORT:  3/3 

ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  TK  ISOL  B VLVS 

5)  RESISTOR,  5. IK  1/4W 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  6,  MCA  3 

PART  NUMBER:  56V76A116  Jl-46;  J3-55 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  VALVE  TALKBACK  STILL  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-487 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM;  OMS 
MDAC  ID;  586 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/lR 


ITEM;  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE;  FAILS  TO  SWITCH  (STUCK  IN  GPC  POSITION) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  CROSSFEED  A VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS 

; 3/lR 

LIFTOFF; 

3/3 

TAL; 

3/lR 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/2R 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  PNL  08 

PART  NUMBER;  33V73A8- 

S26;  S28 

CAUSES;  CONTAMINATION 

, VIBRATION, 

PIECE  PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSE  ABILITY  TO  OVERRIDE  THE  GPC  COMMANDS  FOR  LT/RT  OMS  XFEED  A 
VALVES.  GPC  COMMANDS  AND  REDUNDANT  VALVES  STILL  AVAILABLE  TO 
SUPPORT  XFEED  FUNCTION.  LOSS  OF  ALL  REDUNDANCY,  WORST  CASE, 
WOULD  RESULT  IN  LOSS  OF  MISSION  DUE  TO  LOSS  OF  XFEED  CAPABILITY 
(LOSE  OMS  ENGINE  REDUNDANCY  AND  RCS  PROP  MGR  TECHNIQUES).  DURING 
RTLS  AND  TAL  LOSE  THE  ABILITY  TO  PERFORM  TIME  CRITICAL  PROPELLANT 
DUMPS  THROUGH  THE  RCS  JETS  RESULTING  IN  LOSS  OF 
VEHICLE/LIFE. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 
974099  EO  A09 


REPORT  DATE  02/04/87 


C-488 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM;  OMS 
MDAC  ID;  587 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT:  3/2R 


ITEM:  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  OPEN  POSITION) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  CROSSFEED  A VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/2R 


C [ P ] 


LOCATION;  PNL  08 

PART  NUMBER:  33V73A8-S26;  S28 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  AN  INABILITY  TO  CLOSE  THE  OX  TK  XFEED 
"A"  VALVE  AND  LOSS  OF  LT  & RT  RCS  CROSSFEED  CAPABILITY  DURING  AN 
OMS  BURN  TO  AVOID  A DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS.  LOSS 
OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
CROSSFEED  CAPABILITY  (TO  AVOID  DIRECT  CONNECTION  OF  ALL  OMS  AND 
RCS  TANKS).  WITH  ONE  OMS  CROSSFEED  VALVE  FAILED  OPEN,  A SECOND 
FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE,  WOULD  REQUIRE  THE  USE 
OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS  AND  RCS  TANKS. 

REFERENCES;  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 
974099  EO  A09 


REPORT  DATE  02/04/87 


C-489 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/14/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT; 

3/2R 

MDAC  ID: 

588 

ABORT; 

2/lR 

ITEM; 

SWITCH  TOGGLE  LT/RT 

FAILURE  MODE;  FAILS  TO  SWITCH  (STUCK  IN  CLOSED  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  CROSSFEED  A VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL; 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/3 

ATO: 

LANDING/ SAFING; 

3/3 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/2R 


REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 

LOCATION;  PNL  08 

PART  NUMBER;  33V73A8-S26;  S28 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT  (PRIORITY  FLIGHT  INVOKED).  LOSS  OF 
ALL  REDUNDANCY  IS  LOSS  OF  MISSION  DUE  TO  LOSS  OF  OMS  CROSSFEED 
CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF  PROTECTION  AGAINST 
SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS  OF  CAPABILITY  TO 
BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS  FAILURE  REQUIRES 
SUCH  ACTION.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE 
(PARALLEL  VALVE  FAILS  TO  OPEN)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  JETS 
AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TK  STRUCTURAL  AND  ORBITAL 
MASS  PREPERTIES  CONSTRAINS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 

97099  EO  A09 


REPORT  DATE  02/04/87 


C-490 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

date:  1/14/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/2R 

MDAC  ID:  589  ABORT:  3/lR 

ITEM:  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  GPC  POSITION) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  CROSSFEED  B VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/3 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  08 

PART  NUMBER:  33V73A8- 

-S27;  S29 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  OVERRIDE  THE  GPC  COMMANDS  FOR  LT/RT  OMS  XFEED  B 
VALVES.  GPC  COMMANDS  AND  REDUNDANT  VALVES  STILL  AVAILABLE  TO 
SUPPORT  XFEED  FUNCTION.  LOSS  OF  ALL  REDUNDANCY  WORST  CASE  WOULD 
RESULT  IN  LOSS  OF  MISSION  DUE  TO  LOSS  OF  XFEED  CAPABILITY  (LOSE 
OMS  ENGINE  REDUNDANCY  AND  RCS  PROP  MGR  TECHNIQUES).  DURING  RTLS 
AND  TAL  LOSE  THE  ABILITY  TO  PERFORM  TIME  CRITICAL  PROPELLANT 
DUMPS  THROUGH  THE  RCS  JETS  RESULTING  IN  LOSS  OF  VEHICLE/LIFE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 

97099  EO  A09 


REPORT  DATE  02/04/87 


C-491 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  590 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/2R 


ITEM:  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  OPEN  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 


1) 

ELECTRICAL  COMPONENTS 

2) 

CONTROLS 

3) 

PROP  STOR  & DIST 

SUBSYSTEM 

4) 

OX  & FU  CROSSFEED  B VLVS 

5) 

SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/2R 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  PNL  08 

PART  NUMBER;  33V73A8-S27 ; S29 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  AN  INABILITY  TO  CLOSE  THE  OX  TK  XFEED 
”B"  VALVE  AND  LOSS  OF  LT  & RT  RCS  CROSSFEED  CAPABILITY  DURING  AN 
OMS  BURN  TO  AVOID  A DIRECT  CONNECTION  OF  OMS  AND  RCS  TANKS.  LOSS 
OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
CROSSFEED  CAPABILITY  (TO  AVOID  DIRECT  CONNECTION  OF  ALL  OMS  AND 
RCS  TANKS).  WITH  ONE  OMS  CROSSFEED  VALVE  FAILED  OPEN,  A SECOND 
FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE,  WOULD  REQUIRE  THE  USE 
OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS  AND  RCS  TANKS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 
97099  EO  A09 


REPORT  DATE  02/04/87 


C-492 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  591 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  2/lR 


ITEM:  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  CLOSED  POSITION) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  CROSSFEED  B VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 

PRELAUNCH:  3/3  RTLS;  2/lR 

LIFTOFF;  3/3  TAL:  2/lR 

ONORBIT;  3/2R  AOA:  3/3 

DEORBIT;  3/3  ATO;  3/2R 

LANDING/SAFING;  3/3 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 


LOCATION:  PNL  08 

PART  NUMBER;  33V73A8-S27;  S29 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT  (PRIORITY  FLIGHT  INVOKED).  LOSS  OF 
ALL  REDUNDANCY  IS  LOSS  OF  MISSION  DUE  TO  LOSS  OF  OMS  CROSSFEED 
CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF  PROTECTION  AGAINST 
SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS  OF  CAPABILITY  TO 
BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS  FAILURE  REQUIRES 
SUCH  ACTION.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE 
(PARALLEL  VALVE  FAILS  TO  OPEN)  AWAY  FROM  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  INABILITY  TO  DUMP  OMS  PROP  THROUGH  RCS  JETS. 
POSSIBLE  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP  RESULTING 
IN  POSSIBLE  VIOLATION  OF  PROP  TK  STRUCTURAL  AND  ORBITAL  MASS 
PROPERTIES  CONSTRAINTS. 

REFERENCES;  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 
97099  EO  A09 


REPORT  DATE  02/04/87 


C-493 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  592 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  GPC  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL; 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/lR 

ATO; 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 

LOCATION;  PNL  08 

PART  NUMBER:  33V73A8-S19;  S21 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  OVERLOAD,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  OVERRIDE  THE  GPC  COMMANDS  FOR  LT/RT  OMS  TK  ISOL  A 
VALVES.  GPC  COMMANDS  AND  REDUNDANT  VALVE  STILL  AVAILABLE.  LOSS 
OF  ALL  REDUNDANCY,  WORST  CASE,  WOULD  RESULT  IN  LOSS  OF 
VEHICLE/LIFE  DUE  TO  STRANDED  PROPELLANTS.  INABILITY  TO 
USE/DEPLETE 

PROPELLANT  CAN  LEAD  TO  VIOLATION  OF  PROPELLANT  TANK  STRUCTURAL 
AND  ORBITER  MASS  PROPERTIES. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 
974099  EO  A09 


REPORT  DATE  02/04/87 


C-494 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  593 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  OPEN  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO; 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  ■ A [ ] B [ ] C [ ] 


LOCATION:  PNL  08 

PART  NUMBER;  33V73A8-S19;  S21 

CAUSES:  CONTAMINATION,  OVERLOAD,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE:  , 

FIRST  FAILURE  RESULTS  IN  AN  INABILITY  TO  CIX>SE  THE  OX  & FU  TK  A 
VALVE.  NO  EFFECT,  VALVES  ARE  NORMALLY  OPEN  DURING  ALL  PHASES.  A 
FAILED  VALVE  COULD  RESULT  IN  LOSS  OF  CROSSFEED  TO  AFFECTED  POD 
(TO  AVOID  DIRECT  CONNECTION  OF  TANKS). 

A SECOND  FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE  WOULD  REQUIRE 
THE  USE  OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS  AND  RCS 
TANKS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 

974099  EO  A09 


REPORT  DATE  02/04/87 


C-495 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID;  594 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT:  2/lR 


ITEM:  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  CLOSED  POSITION) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

2/lR 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION;  PNL  08 

PART  NUMBER;  33V73A8-S19;  S21 


HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  OVERLOAD,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE ; 

RESULTS  IN  THE  TANK  ISOL  A VALVE  STUCK  IN  CLOSE 

ONE  TANK  ISOL  VALVE,  ONE  FAILURE 
POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO 
INABILITY  TO  USE/DEPLETE 

RESULTING  IN  POSSIBLE  VIOLATIONS  OF  PROPELLANT  TANK 
STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C 

97099  EO  A09  ' 


VS70- 


REPORT  DATE  02/04/87 


C-496 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID;  595 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


ITEM;  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE;  FAILS  TO  SWITCH  (STUCK  IN  GPC  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO: 

LANDING/SAFING; 

3/3 

HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


REDUNDANCY  SCREENS;  A[2]  B[P]  C-[P] 


LOCATION;  PNL  08 

PART  NUMBER;  33V73A8-S20;  S22 


CAUSES:  CONTAMINATION,  OVERLOAD,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE ; 

LOSE  ABILITY  TO  OVERRIDE  THE  GPC  COMMANDS  FOR  LT/RT  OMS  TK  ISOL  B 
VALVES.  GPC  COMMANDS  AND  REDUNDANT  VALVE  STILL  AVAILABLE.  LOSS 
OF  ALL  REDUNDANCY,  WORST  CASE,  WOULD  RESULT  IN  LOSS  OF 
LIFE/ VEHICLE  DUE  TO  STRANDED  PROPELLANTS.  INABILITY  TO 
USE/DEPLETE 

PROPELLANT  CAN  LEAD  TO  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 
97099  EO  A09 


REPORT  DATE  02/04/87 


C-497 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  596 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  OPEN  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

PRELAUNCH:  3/3 

LIFTOFF:  3/3 

ONORBIT:  3/3 

DEORBIT:  3/3 

LANDING/SAFING:  3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] 

B [ .] 

c [ ] 

LOCATION:  PNL  08 

PART  NUMBER:  33V73A8-S20;  S22 

CAUSES:  CONTAMINATION,  OVERLOAD,  PIECE-PART  STRUCTURAL  FAILURE 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  AN  INABILITY  TO  CLOSE  THE  OX  & FU  TK 
ISOL  "B"  VALVE.  NO  EFFECT,  VALVES  ARE  NORMALLY  OPEN  DURING  ALL 
PHASES.  A FAILED  OPEN  VALVE  COULD  RESULT  IN  LOSS  OF  CROSSFEED  TO 
AFFECTED  POD  (TO  AVOID  DIRECT  CONNECTION  OF  TANKS). 

A SECOND  FAILURE,  A FAILED  OPEN  RCS  CROSSFEED  VALVE  WOULD  REQUIRE 
THE  USE  OF  TANK  ISOL  VALVES  TO  AVOID  CONNECTION  OF  OMS  AND  RCS 
TANKS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 

97099  EO  A09 


REPORT  DATE  02/04/87 


C-498 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  597 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  SWITCH  TOGGLE  LT/RT 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  CLOSED  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  SWITCH  TOGGLE  LT/RT 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

2/lR 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

HDW/FUNC 

2/lR 

2/lR 

2/lR 

2/lR 


C [ P ] 


LOCATION:  PNL  08 

PART  NUMBER:  33V73A8-S20;  S22 

CAUSES:  CONTAMINATION,  OVERLOAD,  PIECE-PART  STRUCTURAL  FAILURE 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  THE  TK  ISOL  "B”  VALVE  STUCK  IN  CLOSE 
POSITION.  WITH  FAILURE  TO  OPEN  ONE  TANK  ISOL  VALVE,  ONE  FAILURE 
AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DURING  ENTRY  DUE  TO 
INABILITY  TO  USE/DEPLETE  PROP  RESULTING  IN  POSSIBLE  VIOLATIONS  OF 
PROP  TANK  STRUCTURAL  AND  ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MF0004-400  REV  C,  VS70- 

97099  EO  A09 


REPORT  DATE  02/04/87 


C-499 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/06/87 

SUBSYSTEM:  OMS 

MDAC  ID:  598 


ITEM:  FUSE 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  TOTALIZER 

5)  FUSE,  3A 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] B [ ] 

LOCATION;  AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 

PART  NUMBER:  55V76A132F17;  56V76A133F9 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  LOSE  PRIMARY  POWER  SUPPLY  FOR  TOTALIZER,  SECONDARY  STILL 
AVAILABLE.  POWER  SUPPLIES  ARE  CROSS-STRAPPED. 

LOSS  OF  ALL  REDUNDANCY  IS  NOT  CONSIDERED  FEASIBLE  SINCE  IT  WOULD 
REQUIRE  LOSS  OF  GROUND  CALCULATIONS  FROM  FLOW  RATE-BURN  TIME  DATA 
THEREFORE  THE  WORST  CASE  EFFECT  WOULD  BE  LOSS  OF  ALL  QUANTITY 
GAGE  DATA  EXCEPT  GND  CALCULATIONS,  NO  EFFECT  ON  MISSION. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-500 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/06/87 

SUBSYSTEM:  OMS 

MDAC  ID:  599 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  FUSE,  3 A 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  TOTALIZER 

5)  FUSE,  3A 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  4,  PCA  1 

PART  NUMBER:  54V76A13 1F15 ; F16 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  LOSE  SECONDARY  POWER  SUPPLY  FOR  TOTALIZER,  PRIMARY  STILL 
AVAILABLE.  POWER  SUPPLIES  ARE  CROSS-STRAPPED. 

LOSS  OF  ALL  REDUNDANCY  IS  NOT  CONSIDERED  FEASIBLE  SINCE  IT  WOULD 
REQUIRE  LOSS  OF  GROUND  CALCULATIONS  FROM  FLOW  RATE-BURN  TIME  DATA 
THEREFORE  THE  WORST  CASE  EFFECT  WOULD  BE  LOSS  OF  ALL  QUANTITY 
GAGE  DATA  EXCEPT  GND  CALCULATIONS,  NO  EFFECT  ON  MISSION. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-501 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  600 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/lR 


ITEM:  INDICATOR,  POSITION  BARBERPOLE  TALKBACK 

FAILURE  MODE:  ERRONEOUS  INDICATION  (FAILS  HIGH,  FAILS  LOW,  FAILS 

MIDTRAVEL) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  A VLVS 

5)  INDICATOR,  POSITION  BARBERPOLE  TALKBACK 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING ; 

REDUNDANCY  SCREENS; 


CRITICALITIES 
HDW/FUNC 
3/3 
3/3 
3/2R 
3/3 
3/3 


A [ 2 ] 


B [ 


ABORT 

HDW/FUNC 

RTLS; 

3/lR 

TAL: 

3/lR 

AOA: 

3/3 

ATO: 

3/3 

[ P ] 

C [ P ] 

LOCATION:  PNL  08 

PART  NUMBER:  33V73A8-DS12;  DS14 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE ; 

BARBERPOLE  TALKBACK  TO  CREW  FALSLEY  INDICATES  EITHER  THE  OX  VLV, 
THE  FU  VLV  OR  BOTH  VLVS  FAILED  TO  OPEN  WHEN  COMMANDED  AND  HAVE 
FAILED  PARTIALLY  CLOSED. 

WORST  CASE  IS  VLVS  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLVS 
ARE  USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSLY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  FALSLY  BE  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  & TAL. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-502 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM;  OMS 
MDAC  ID;  601 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/lR 


ITEM;  INDICATOR,  POSITION  BARBERPOLE  TALKBACK 

FAILURE  MODE;  ERRONEOUS  INDICATION  (FAILS  HIGH,  FAILS  LOW,  FAILS 

MIDTRAVEL) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  CROSSFEED  B VLVS 

5)  INDICATOR,  POSITION  BARBERPOLE  TALKBACK 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/lR 

LIFTOFF; 

3/3 

TAL; 

3/lR 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  PNL  08 

PART  NUMBER;  33V73A8-DS13 ; DS15 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE ; 

BARBERPOLE  TALKBACK  TO  CREW  FALSLEY  INDICATES  EITHER  THE  OX  VLV, 
THE  FU  VLV  OR  BOTH  VLV'S  FAILED  TO  OPEN  WHEN  COMMANDED  AND  HAVE 
FAILED  PARTIALLY  CLOSED. 

WORST  CASE  IS  VLV'S  DECLARED  FAILED  CLOSED  AND  REDUNDANT  VLV'S 
ARE  USED  TO  COMPLETE  XFEED.  LOSS  OF  ALL  REDUNDANCY  COULD  RESULT 
IN  FALSLY  FAILING  THE  XFEED  SYSTEM  RESULTING  IN  LOSS  OF  MISSION. 
DURING  ABORTS  THE  XFEED  SHOULD  NOT  BE  DECLARED  FAILED  AND  THE 
DUMP  SHOULD  TAKE  PLACE  REGARDLESS  OF  INDICATIONS,  BUT  SINCE  THE 
XFEED  COULD  FALSLY  BE  FAILED  CLOSED  THE  RESULT  IS  LOSS  OF 
VEHICLE/LIFE  FOR  RTLS  & TAL. 

REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-503 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  602 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  INDICATOR,  POSITION  BARBERPOLE  TALKBACK 

FAILURE  MODE;  ERRONEOUS  INDICATION  (FAILS  HIGH,  FAILS  LOW,  FAILS 

MIDTRAVEL) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  A VLVS 

5)  INDICATOR,  POSITION  BARBERPOLE  TALKBACK 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF:  ■ 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION;  PNL  08 

PART  NUMBER:  33V73A8-DS5;  DS7 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE : 

CREW  LT/RT  OMS  ISOL  A POSITION  INDICATION  DS5/DS7  WOULD  FALSELY 
SHOW  A BARBERPOLE  INDICATING  EITHER  THE  FUEL  OR  OX  "A”  VALVES  ARE 
STUCK  PARTIALLY  OPEN/CLOSE  OR  THERE  IS  A POSITION  MISMATCH 
BETWEEN  THE  TWO  VALVES. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 

valve  closed  resulting  in  loss  of  mission  due  to  safety 

CONSIDERATIONS 

(ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE). 

REFERENCES:  VS70-943  099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-504 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/13/87 

SUBSYSTEM:  OMS 

MDAC  ID:  603 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  INDICATOR,  POSITION  BARBERPOLE  TALKBACK 

FAILURE  MODE:  ERRONEOUS  INDICATION  (FAILS  HIGH,  FAILS  LOW,  FAILS 

MIDTRAVEL) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  OX  & FU  TK  ISOL  B VLVS 

5)  INDICATOR,  POSITION  BARBERPOLE  TALKBACK 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS: 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  PNL  08 

PART  NUMBER:  33V73A8-DS6;  DS8 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK 


EFFECTS/RATIONALE ; 

CREW  LT/RT  OMS  ISOL  A POSITION  INDICATION  DS5/DS7  WOULD  FALSELY 
SHOW  A BARBERPOLE  INDICATING  EITHER  THE  FUEL  OR  OX  "A"  VALVES  ARE 
STUCK  PARTIALLY  OPEN/CLOSE  OR  THERE  IS  A POSITION  MISMATCH 
BETWEEN  THE  TWO  VALVES. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  LOSS  OF  DIRECT  VALVE 
TALKBACK  TO  CREW.  WORST  CASE  WOULD  BE  FALSELY  FAILING  THE  A OR  B 
VALVE  CLOSED  RESULTING  IN  LOSS  OF  MISSION  DUE  TO  SAFETY 
CONSIDERATIONS 

(ONE  FAILURE  AWAY  FROM  LOSS  OF  VEHICLE/LIFE). 

REFERENCES:  VS70-943099  REV  A EO  B12;  VS70-976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-505 


c- 


7 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

OMS 

604 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  METER,  FRCS/OMS  KIT  PRESSURE 

FAILURE  MODE:  ERRONEOUS  OUTPUT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  METER,  FRCS/OMS  KIT  PRESSURE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


LOCATION:  PNL  03  MIO 

PART  NUMBER:  33V76A3-M10 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  VIBRATION,  MECHANICAL  SHOCK,  ELECTROMAGNETIC  FIELDS, 

MISHANDLING/ABUSE 


EFFECTS/RATIONALE : 

GAGE  MIO  PROVIDES  A FALSE  INDICATION  OF  RCS  HE  AND  ULLAGE 
PRESSURES  {ALSO  KIT  ULLAGE  PRESSURES).  TWO  OTHER  REDUNDANT 
MEASUREMENT  PATHS  ARE  AVAILABLE  FOR  EACH  FRCS  HE  TK  AND  ONE 
REDUNDANT  PATH  FOR  FU/OX  ULLAGE  PRESSURES.  RESPECTIVE  MSID  #'S 
ARE  V42P1113C&V42P1114C/V42P1110C  & V42P1112C  AND 
V42P1116C/V42P1115C.  FOR  ERRONEOUS  INDICATIONS  FROM  ALL 
REDUNDANCY;  1ST  DUE  TO  THE  TIME  CRITICALITY  DURING  ASCENT,  MCC 
WOULD  DECLARE  FRCS  FAILED  (REF  FLIGHT  RULE  6-41)  RESULTING  IN 
PROP  MGR  IN  THE  APS,  THEREFORE  LOSS  OF  MISSION  CAPABILITIES,  2ND 
FOR  OTHER  PHASES  IT  IS  ASSUMED  MCC  WOULD  MONITOR  FRCS  PROP  TK  OUT 
PRESSURE  FOR  HE  TK  HEALTH. 


REFERENCES:  VS70-942099  REV  C EO  DOl  ; JSC-20923  PCN-1 


REPORT  DATE  02/04/87 


C-506 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/13/86 

OMS 

605 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM:  METER,  LT  OMS/RCS  PRESSURE 

FAILURE  MODE:  ERRONEOUS  OUTPUT 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  METER,  LT  OMS/RCS  PRESSURE 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  03  M9 

PART  NUMBER:  33V73A3-M9 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

GAGE  M9  PROVIDES  A FALSE  INDICATION  OF  LT  OMS/RCS  PROPELLANT 
ULLAGE  AND  LT  RCS  HE  TANK  PRESSURES.  REDUNDANT  GPC  MEASUREMENT 
PATHS  ARE  AVAILABLE  (LT  OMS  FU/OX  V43P4321C/V43P4221C,  LT  RCS 
FU/OX  V42P2116C/V42P2115C,  LT  RCS  HE  TANK  OX/FU  V42P2110C, 
V42P2112C/V42P2113C,  V422114C).  ERRONEOUS  INDICATION  FROM  LOSS 
OF  ALL  REDUNDANCY  IN  PL  & 00  PHASES  WOULD  RESULT  IN  LTRCS  HE  TK 
BEING  DECLARED  FAILED  RESULTING  IN  A LOSS  OF  DELTA  V AND  LOSS  OF 
MISSION  CAPABILITY  (REF.  FLIGHT  RULE  6-41),  UNLESS  SENSOR  FAILURE 
IS  DETERMINED. 

REFERENCES;  VS70-942099  REV  C EO  DOl;  JSC-20923  PCN-1 


REPORT  DATE  02/04/87 


C-507 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/16/86 

OMS 

606 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  METER,  RCS/OMS  PROPELLANT  QUANTITY  GAUGE 

FAILURE  MODE:  ERRONEOUS  OUTPUT 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  METER,  RCS/OMS  PROPELLANT  QUANTITY  GAUGE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING; 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  PNL  03  M12 

PART  NUMBER;  33V73A3-M12 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  CAPABILITY  TO  SELECT  OMS/RCS/KIT  PROPELLANT  QUANTITY  FOR 
VISUAL  DISPLAY  ON  METER  M12.  THERE  ARE  TWO  OTHER  REDUNDANT 
MEASUREMENT  PATHS  FOR  THE  OMS  AND  ONE  REDUNDANT  PATH  FOR  RCS.  IN 
THE  OMS,  ONE  PATH  IS  THROUGH  THE  GPC  THE  OTHER  HARDWIRED  TO  THE 
GSE  PNL  (J207).  LOSS  OF  ALL  QUANTITY  PATHS  HAS  NO  EFFECT  SINCE 
GROUND  CALCULATIONS  WOULD  STILL  BE  AVAILABLE. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-508 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/13/86 

SUBSYSTEM:  OMS 

MDAC  ID:  607 

ITEM:  METER,  RT  OMS/RCS 

FAILURE  MODE:  ERRONEOUS  OUTPUT 

LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 

PRESSURE 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  METER,  RT  OMS/RCS  PRESSURE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  PNL  03  Mil 

PART  NUMBER:  33V73A3-M11 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

GAGE  Mil  PROVIDES  A FALSE  INDICATION  OF  RT  OMS/RCS  PROPELLANT 
ULLAGE  AND  RT  RCS  HE  TANK  PRESSURES.  REDUNDANT  GPC  MEASUREMENT 
PATHS  ARE  AVAILABLE  (RT  OMS  FU/OX  V43P5321C/V43P5221C,  RT  RCS 
FU/OX  V42P3116C/V42P3115C,  RT  RCS  HE  TANK  OX/FU  V42P3110C, 
V42P3112C/V42P3113C,  V42P3114C).  ERRONEOUS  INDICATION  FROM  LOSS 
OF  ALL  REDUNDANCY  IN  PL  & 00  PHASES  WOULD  RESULT  IN  RT  RCS  HE  TK 
BEING  DECLARED  FAILED  RESULTING  IN  A LOSS  OF  DELTA  V AND  LOSS  OF 
MISSION  CAPABILITY  (REF.  FLIGHT  RULE  6-41),  UNLESS  SENSOR  FAILURE 
IS  DETERMINED. 


REFERENCES:  VS70-942099  REV  C EO  DOl;  JSC-20923  PCN-1 


REPORT  DATE  02/04/87 


C-509 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

608 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  SENSOR  PRESSURE,  OMS  FUEL  TK  ULLAGE 

FAILURE  MODE:  ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  SENSOR  PRESSURE,  OMS  FUEL  TK  ULLAGE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION:  PROPELLANT  FUEL  TANK 

PART  NUMBER:  51V43PT403,  52V43PT503 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  UTILIZE  PT403/PT503  FOR  FU  ULLAGE  PRESSURE 
MEASUREMENT.  COULD  FALSELY  INDICATE  FU  LEAKAGE.  THE  WORST  CASE 
WOULD  BE  A FAILURE  WHEN  THE  FU  TK  ISO  VALVES  ARE  CLOSED  DURING 
RCS  CROSSFEED  FROM  OTHER  POD. 

UNDER  THESE  CONDITIONS  NO  OTHER  PRESSURE  MEASUREMENTS  ARE 
AVAILABLE  TO  MONITOR  TK  STATUS.  TO  DETERMINE  SENSOR  FAILURE  THE 
HE  ISO  VALVE  MUST  BE  OPENED  WHILE  MONITORING  HE  TK  PRESSURE 
MEASUREMENTS . 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-510 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


11/23/86 

OMS 

609 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


ITEM; 

FAILURE  MODE; 
TOLERANCE) 


SENSOR  PRESSURE,  OX  TANK  ULLAGE 
ERRONEOUS  OUTPUT  ( OPEN,  SHORTED, 


FAILS  OUT  OF 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  SENSOR  PRESSURE,  OMS  OX  TK  ULLAGE 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO; 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] B [ 


C [ ] 


LOCATION;  PROPELLANT  OXIDIZER  TANK 

PART  NUMBER;  51V43PT404,  52V43PT504 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; ^ ^ ^ 

LOSE  ABILITY  TO  UTILIZE  PT404/PT504  FOR  OX  ULLAGE  PRESSURE 
MEASUREMENT.  COULD  FALSELY  INDICATE  OX  LEAKAGE.  THE  WORST  CASE 
WOULD  BE  A FAILURE  WHEN  THE  OX  TK  ISOL  VALVES  ARE  CLOSED  DURING 
RCS  CROSSFEED  FROM  OTHER  POD. 

UNDER  THESE  CONDITIONS  NO  OTHER  PRESSURE  MEASUREMENTS  ARE 
AVAILABLE  TO  MONITOR  TK  STATUS.  TO  DETERMINE  SENSOR  FAILURE  THE 
HE  ISO  VALVES  MUST  BE  OPENED  WHILE  MONITORING  HE  TK  PRESSURE 
MEASUREMENTS . 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-511 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

610 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT;  3/3 


ITEM;  SENSOR  TEMPERATURE,  FUEL  TANK  LOWER 

FAILURE  MODE;  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS -OUT-OF- 
TOLERANCE)  wua  ur 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  FUEL  TANK  LOWER 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

2/2 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL; 

AOA: 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PROPELLANT  FUEL  TANK 

PART  NUMBER:  51V43TT405,  52V43TT505 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  MISSION  WOULD  OCCUR  IN  THE  LIFTOFF  PHASE.  A SENSOR 
FAILURE  COULD  INCORRECTLY  LEAD  TO  FAILING  OMS  FU  PROPELLANT  TANK 
20923  PCN-1,  RULE  6-2)  LEADING  TO  THE  ESTABLISHMENT  OF 
A SHALLOW  ATO  BEFORE  SENSOR  FAILURE  IS  DETERMINED 


^FE^NCES;  VS70-943099  REV  EO  B12;  JSC  20923  PCN-1;  73A760210 
V £ 


REPORT  DATE  02/04/87 


C-512 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

611 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  3/3 


ITEM:  SENSOR  TEMPERATURE,  OX  LOWER  TANK 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  OX  LOWER  TANK 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

2/2 

TAL; 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PROPELLANT  OXIDIZER  TANK 

PART  NUMBER:  51V43TT404,  52V43TT504 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  MISSION  WOULD  OCCUR  IN  THE  LIFTOFF  PHASE.  A SENSOR 
FAILURE  COULD  INCORRECTLY  LEAD  TO  FAILING  OMS  OX  PROPELLANT  TANK 
(REF:  JSC  20923  PCN-1,  RULE  6-2)  LEADING  TO  THE  ESTABLISHMENT  OF 
A SHALLOW  ATO  BEFORE  SENSOR  FAILURE  IS  DETERMINED. 


REFERENCES:  VS70-943099  REV  EO  B12;  JSC  20923  PCN-1;  73A760210 

REV  E 


REPORT  DATE  02/04/87 


C-513 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


11/13/86 

OMS 

612 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM;  SWITCH  ROTARY,  RCS/OMS  PRESS 

FAILURE  MODE;  FAILS  TO  SWITCH;  (POLES  STUCK  IN  ONE  OF  THREE 
POSITION  OR  POLES  FAIL  TO  HAKE  CONTACT  IN  ANY  POSITION) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  SWITCH  ROTARY,  RCS/OMS  PRESS 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO; 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

LOCATION:  PNL  03  SIO 

PART  NUMBER;  33V73A3-S10 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

WSE  CAPABILITY  TO  UTILIZE  GAGES  M9,  MIO,  AND  Mil  FOR  MONITORING. 
REDUNDANT  MEASUREMENTS  ARE  AVAILABLE  THROUGH  GPC  AND  ARE  PART  OF 
THE  C&W  SYSTEM.  THE  LOSS  OF  ALL  SIGNAL  PATHS  FOR  OMS  RT/LT/KIT 
PROP  ULLAGE,  RCS  RT/LT/FWD  PROP  ULLAGE  AND  RCS  RT/LT/FWD  HE  TK 
PRESSURE  WOULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY  REASONS  SINCE 
THE  ACTUAL  STATUS  OF  THE  SYSTEMS  ARE  UNAVAILABLE. 


REFERENCES:  VS70-942099  REV  C EO  DOl;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-514 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/16/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  613  ABORT:  3/3 

ITEM:  SWITCH  ROTARY,  RCS/OMS  PROPELLANT  QUANTITY  GAUGE 

FAILURE  MODE:  FAILS  TO  SWITCH;  (POLES  STUCK  IN  ONE  OF  THREE 

POSITION  OR  POLES  FAIL  TO  MAKE  CONTACT  IN  ANY  POSITION) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  PROP  STOR  & DIST  SUBSYSTEM 

4)  SWITCH  ROTARY,  RCS/OMS  PROPELLANT  QUANTITY  GAUGE 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL; 

ONORBIT: 

3/3 

AO  A: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ 


C [ ] 


LOCATION:  PNL  03  Sll 

PART  NUMBER:  33V73A3-S11 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  SELECT  OMS/RCS/KIT  PROPELLANT  QUANTITY  FOR 
VISUAL  DISPLAY  ON  METER  M12.  THERE  ARE  TWO  OTHER  REDUNDANT 
MEASUREMENT  PATHS  FOR  THE  OMS  AND  ONE  REDUNDANT  PATH  FOR  RCS.  IN 
THE  OMS,  ONE  PATH  IS  THROUGH  THE  GPC  THE  OTHER  HARDWIRED  TO  THE 
GSE  PNL  (J207).  LOSS  OF  ALL  QUANTITY  PATHS  HAVE  NO  EFFECT 
SINCE  GROUND  CALCULATIONS  WOULD  STILL  BE  AVAILABLE. 

REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-515 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/30/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/3 

MDAC  ID: 

614 

ABORT: 

3/3 

ITEM: 

DIODE 

FAILURE  MODE 

; FAILS  OPEN 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6)  DIODE 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121  J3-108;  56V76A123  J3-94 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  LOSE  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  PERFORMING  AN  OMS  BURN 
WITHOUT  PERFORMING  A GN2  PURGE  POST  BURN. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  INABILITY  TO  PERFORM  AN  OMS 
BURN  WITHOUT  A GN2  PURGE.  NO  EFFECT  ON  MISSION  WITHOUT  FIRST 
HAVING  A FAILURE  IN  THE  N2  SYSTEM. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-516 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/30/86 

OMS 

615 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM;  DIODE 

FAILURE  MODE;  FAILS  SHORT 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 


1) 

ELECTRICAL  COMPONENTS 

2) 

CONTROLS 

3) 

OME  SUBSYSTEM 

4) 

GN2  ASSEMBLY 

5) 

GN2  ENG  CNTRL  1/2  VLV 

6) 

DIODE 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH;  3/3 

RTLS; 

3/3 

LIFTOFF;  3/3 

TAL; 

3/3 

ONORBIT;  3/3 

AOA; 

3/3 

DEORBIT;  3/3 

ATO; 

3/3 

LANDING/ SAFING;  3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 


LOCATION;  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER;  54V76A121  J3-108;  56V76A123  J3-94 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  STILL  MAINTAIN  FULL  CAPABILITY.  lOSS  OF  ALL  REDUNDANCY, 
WORST  CASE,  WOULD  RESULT  IN  THE  INABLITY  TO  PERFORM  A PURGE  AFTER 
AN  OMS  BURN. 

FOR  A MANUAL  TAL  THE  LOSS  OF  THE  PURGE  RESULTS  IN  AN  INABLITY  TO 
PERFORM  TIME  CRITICAL  PROP  DUMPS,  LOSS  OF  VEHICLE/LIFE  (1/1). 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-517 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/30/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/3 

MDAC  ID: 

616 

ABORT: 

3/3 

ITEM: 

DIODE 

FAILURE  MODE 

: FAILS  OPEN 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  DIODE 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A 

[ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  4, 

LCA  1; 

AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121 

J3-107; 

56V76A123  J3-95 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  LOSS  OF  TWO  ELECTRICAL  PATHS  FOR  PERFORMING  AN  OMS  BURN 
WITHOUT  A PURGE.  NEXT  FAILURE  OF  REDUNDANT  ELEMENT,  WORST  CASE, 
WOULD  RESULT  IN  THE  INABILITY  TO  PERFORM  A PURGE  AFTER  AN  OMS 
BURN.  FOR  A MANUAL  TAL  THE  LOSS  OF  THE  PURGE  RESULTS  IN  AN 
INABILITY  TO  PERFORM  TIME  CRITICAL  PROP  DUMPS,  LOSS  OF 
LIFE/VEHICLE  (2/lR). 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-518 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/30/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  OMS  FLIGHT;  3/3 

MDAC  ID;  617  ABORT:  3/3 

ITEM;  DIODE 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  DIODE 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ S AFING ; 

3/3 

REDUNDANCY  SCREENS:  A 

[ 

] 

B [ ] 

C [ ] 

LOCATION:  AV  BAY  4, 

LCA 

1; 

AV 

BAY  6,  LCA  3 

PART  NUMBER:  54V76A121 

J3- 

107 

; 56V76A123  J3-95 

CAUSES:  CONTAMINATION, 

VIBRATION, 

MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 
EFFECTS/RATIONALE ; 

NONE,  LOSS  OF  TWO  ELECTRICAL  PATHS  FOR  PERFORMING  AN  OMS  BURN 
WITHOtJT  A PURGE.  NEXT  FAILURE  OF  REDUNDANT  ELEMENT,  WORST 
CASE,  WOULD  RESULT  IN  THE  INABILITY  TO  PERFORM  A PURGE  AFTER  AN 
OMS  BURN.  FOR  A MANUAL  TAL  THE  LOSS  OF  THE  PURGE  RESULTS  IN  AN 
INABILITY  TO  PERFORM  TIME  CRITICAL  PROP  DUMPS,  LOSS  OF 
LIFE/ VEHICLE  (2/lR). 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-519 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

12/30/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT; 

3/3 

MDAC  ID; 

618 

ABORT; 

3/3 

ITEM; 

DIODE 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  DIODE 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

REDUNDANCY  SCREENS; 

LOCATION;  AV  BAY  S 

PART  NUMBER;  55V76A12 


SHOCK,  OVERLOAD 


CRITICALITIES 

HDW/FUNC  ABORT  HDW/FUNC 


3/3 

RTLS; 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA; 

3/3 

3/3 

3/3 

ATO; 

3/3 

[•  ] 

B [ 

] 

c [ ] 

LCA  2; 

AV  BAY  4, 

LCA  1 

J3-94; 

54V76A121 

J3-94 

VIBRATION,  MECHANICAL  1 

SHOCK,  THERMAL 

EFFECTS/RATIONALE ; 

NONE,  LOSE  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  PERFORMING  AN  OMS  BURN 
WITHOUT  PERFORMING  A GN2  PURGE  POST  BURN. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  INABILITY  TO  PERFORM  AN  OMS 
BURN  WITHOUT  A GN2  PURGE.  NO  EFFECT  ON  MISSION  WITHOUT  FIRST 
HAVING  A FAILURE  IN  THE  N2  SYSTEM. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-520 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

619 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  2/lR 


ITEM:  DIODE 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  DIODE 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

HDW/FUNC 

3/3 

2/lR 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122  J3-94;  54V76A121  J3-94 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  STILL  MAINTAIN  FULL  CAPABILITY.  LOSS  OF  ALL  REDUNDANCY, 
WORST  CASE,  WOULD  RESULT  IN  THE  INABLITY  TO  PERFORM  A PURGE  AFTER 
AN  OMS  BURN. 

FOR  A MANUAL  TAL  THE  LOSS  OF  THE  PURGE  RESULTS  IN  AN  INABLITY  TO 
PERFORM  TIME  CRITICAL  PROP  DUMPS,  LOSS  OF  VEHICLE/LIFE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-521 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/30/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT; 

3/3 

MDAC  ID; 

620 

ABORT; 

3/3 

ITEM; 

DIODE 

FAILURE  MODE 

: FAILS  SHORT 

LEAD  ANALYST 

; V.J.  BURKEMPER 

SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6)  DIODE 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO; 

3/3 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER;  55V76A122  J3-95;  54V76A121  J3-95 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  PERFORMING  AN  OMS 
BURN  WITH  A PURGE.  NEXT  FAILURE  OF  REDUNANT  ELEMENT,  WORST 
CASE,  WOULD  RESULT  IN  THE  INABILITY  TO  PERFORM  A PURGE  AFTER  AN 
OMS  BURN.  FOR  A MANUAL  TAL  THE  LOSS  OF  THE  PURGE  RESULTS  IN  AN 
INABILITY  TO  PERFORM  TIME  CRITICAL  PROP  DUMPS,  LOSS  OF 
LIFE/VEHICLE  (2/lR). 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C~522 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

621 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
LEAD  ANALYST: 


DIODE 

FAILS  OPEN 
V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6)  DIODE 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A 

[ 

] 

B [ 

] 

c [ ] 

LOCATION:  AV  BAY  5, 

LCA 

2; 

AV  BAY  4, 

LCA  1 

PART  NUMBER:  55V76A122 

J3- 

95; 

54V76A121 

J3-95 

CAUSES:  CONTAMINATION, 

VIBRATION,  MECHANICAL  i 

SHOCK,  THERl 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  LOSS  OF  TWO  ELECTRICAL  PATHS  FOR  PERFORMING  AN  OMS  BURN 
WITHOUT  A PURGE.  NEXT  FAILURE  OF  REDUNDANT  ELEMENT,  WORST  CASE, 
WOULD  RESULT  IN  THE  INABILITY  TO  PERFORM  A PURGE  AFTER  AN  OMS 
BURN.  FOR  A MANUAL  TAL  THE  LOSS  OF  THE  PURGE  RESULTS  IN  AN 
INABILITY  TO  PERFORM  TIME  CRITICAL  PROP  DUMPS,  LOSS  OF 
LIFE/VEHICLE  (2/lR). 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-523 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

622 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/2R 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  2 VLVS 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH : 3/3  RTLS : 

LIFTOFF:  3/3  TAL: * 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/2R 


REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


C [ P ] 


LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121AR  Jll-J*  TYPE  III;  56V76A123AR  Jll-FF 

(130)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  CAUSES  ENGINE  PURGE  VLV  TO  BE  FAILED  CLOSED  AND  IS 
NO  EFFECT.  AFFECTED  ENGINE  LOST  FOR  10  MINUTES  AFTER  SHUTDOWN  TO 
ALLOW  FOR  SUBLIMATION  OF  FROZEN  PROP  IN  ENGINE  LINES.  OTHER 
ENGINE  AVAILABLE  IF  BURN  REQUIRED  WITHIN  10  MINUTES.  LOSS  OF  ALL 
REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF  BOTH 
ENGINES  FOR  10  MINUTES  AFTER  BURNS.  CRIT  1/1  FOR  MANUAL 
TAL  CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-524 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/30/86 

OMS 

623 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

2/lR 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  2 VLVS 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

2/lR 

LIFTOFF; 

3/2R 

TAL: 

2/lR 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121AR  Jll-J'  TYPE  III;  56V76A123AR  Jll-FF 

(130)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  CAUSES  THE  ENG  PURGE  VLV  TO  BE  FAILED  OPEN  AND  IS 
NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  ALL  GN2  PRESSURANT,  INABILITY  TO 
MAINTAIN  OPEN  BI-PROP  VALVES,  AND  LOSS  OF  BOTH  ENGINES.  WITH 
FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE  (FAILURE  OF  SERIES 
VALVE  TO  REMAIN  CLOSED)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  GN2  PRESSURANT  IN  ONE  POD.  LOSS  OF  AFFECTED 
ENGINE,  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-525 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

624 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/2R 

3/2R 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1 VLVS 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/2R 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 3 

B [ F ] 

C [ P ] 

LOCATION;  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER;  54V76A121  Jll-G;  56V76A123  Jll-R  (142)  TYPE  III 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  CAUSES  ENGINE  PURGE  VLV  TO  BE  FAILED  CLOSED  AND  IS 
NO  EFFECT.  AFFECTED  ENGINE  IS  LOST  FOR  10  MINUTES  AFTER  SHUTDOWN 
TO  ALLOW  FOR  SUBLIMATION  OF  FROZEN  PROP  IN  ENGINE  LINES.  OTHER 
ENGINE  AVAILABLE  IS  BURN  REQUIRED  WITHIN  10  MINUTES.  LOSS  OF  ALL 
REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF  BOTH 
ENGINES  FOR  10  MINUTES  AFTER  BURNS.  CRIT  1/1  FOR  MANUAL 
TAL  CONTINGENCY  OMS  DUMP  PURGE  REQUIREMENT. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-526 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

625 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1 VLVS 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

2/lR 

LIFTOFF; 

3/2R 

TAL: 

2/lR 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING 

; 3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

4,  LCA  1;  AV 

BAY  6,  LCA  3 

PART  NUMBER:  54V76A121  Jll-G;  56V76A123  Jll-R  (142)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  CAUSES  THE  ENG  PURGE  VLV  TO  BE  FAILED  OPEN  AND  IS 
NO  EFFECT.  LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  ALL  GN2  PRESSURANT,  INABILITY  TO 
MAINTAIN  OPEN  BI-PROP  VALVES,  AND  LOSS  OF  BOTH  ENGINES.  WITH 
FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE  (FAILURE  OF  SERIES 
VALVE  TO  REMAIN  CLOSED)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  GN2  PRESSURANT  IN  ONE  POD,  LOSS  OF  AFFECTED 
ENGINE,  AND  POSSIBLE  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  MASS  PROPERTIES  CONSTRAINTS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-527 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

626 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1 VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRE LAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS:  A[2]  B[F]  C[P] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121AR  Jll-E'  TYPE  III;  56V76A123AR  J6-NN 

(133)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  OPERATION  OF 
ENGINE  CONTROL  VALVES  1 AND  2. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME*S  THEREFORE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  LOSS  OF  DEORBIT  CAPABILITY  WHEN  ABOVE 
RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS 
DUMP  DURING  ABORTS  RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK 
STRUCTURAL  AN  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS;  ONE 
FAILURE  AWAY  FROM  LOSS  OF  ONE  OME  RESULTING  IN  INABILITY  TO 
PERFORM  DUMPS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-528 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


12/30/86 

OMS 

627 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1 VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/ SAFING 

: 3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY 

4,  LCA  1;  AV  BAY 

6,  LCA  3 

PART  NUMBER:  54V76A121AR  Jll-E'  TYPE 

III;  56V76A123AR  J6 

(133)  TYPE  III 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FAILURE  OF  ONE  DRIVER  RESULTS  IN  HAVING  TO  PLACE  EITHER  THE 
ARM/PRESS  OR  THE  ENG  VLV  SWITCH  IN  THE  OFF  POSITION  TO  CLOSE  ENG 
CONTROL  VLV  NO.  2.  FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  ALL  ENG 
CONTROL  VLV'S  FAILED  OPEN  REQUIRING  THE  CI/3SURE  OF  THE  TK  ISO 
VLV'S  TO  STOP  THE  BURN.  OMS  PROPELLANT  OR  ENGINE  ARE  NO  LONGER 
AVAILABLE  SINCE  REOPENING  OF  THE  TK  ISO  VLV'S  COULD  RESULT  IN 
SEVERE  POD  DAMAGE. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-529 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

628 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  2 VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO; 

3/3 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS;  A[2]  B[F]  C[P] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

f^4)  Jll-F'  TYPE  III;  56V76A123AR  J6-PP 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  OPERATION  OF 
ENGINE  CONTROL  VALVES  1 AND  2.  UJ? 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME'S  THEREFORE 

VEHICLE/LIFE  DUE  TO  LOSS  OF  DEORBIT  CAPABILITY  WHEN  ABOVE 
RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 
BURING  aborts  resulting  in  possible  violation  of  prop  TANK 
STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS;  ONE 
FAILURE  AWAY  FROM  LOSS  OF  ONE  OME  RESULTING  IN  INABILITY  TO 
PERFORM  DUMPS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-530 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

12/30/86 

OMS 

629 

HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 

HDW/FUNC 

3/lR 

3/lR 

ITEM: 

DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  2 VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/SAFING 

; 3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B 

C P ] 

C [ P ] 

LOCATION:  AV  BAY 

4,  LCA  1;  AV 

BAY 

6,  LCA  3 

PART  NUMBER:  54V76A121AR  Jll-F*  TYPE  III;  56V76A123AR  J6-PP 

(134)  TYPE  III 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FAILURE  OF  DRIVER  RESULTS  IN  HAVING  TO  PLACE  EITHER  THE  ARM/PRESS 
SWITCH  OR  THE  ENG  VLV  SWITCH  IN  THE  OFF  POSITION  TO  CLOSE  ENG 
CONTROL  VLV  NO.  2.  FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  ALL  ENG 
CONTROL  VLV'S  FAILED  OPEN  REQUIRING  THE  CLOSURE  OF  THE  TK  ISO 
VLV'S  TO  STOP  THE  BURN.  OMS  PROPELLANT  OR  ENGINE  ARE  NO  LONGER 
AVAILABLE  SINCE  REOPENING  OF  THE  TK  ISO  VLV'S  COULD  RESULT  IN 
SEVERE  POD  DAMAGE. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-531 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

630 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO; 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS;  A[2]  B[F]  C[P] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121AR  J3-109  TYPE  III;  56V76A123AR  J3-93 

(134)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  OPERATION  OF 
ENGINE  CONTROL  VALVES  1 AND  2. 


LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME'S  THEREFORE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  LOSS  OF  DEORBIT  CAPABILITY  WHEN  ABOVE 
RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 
DURING  ABORTS  RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS;  ONE 
FAILURE  AWAY  FROM  LOSS  OF  ONE  OME  RESULTING  IN  INABILITY  TO 
PERFORM  DUMPS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-532 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


12/30/86 

OMS 

631 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS;  A [ 2 ] B [ F ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION;  AV  BAY  4,  LCA  l7  AV  BAY 
PART  NUMBER:  54V76A121AR  J3-109  TYPE 
(134)  TYPE  III 


6,  LCA  3 

III;  56V76A123AR  J3-93 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS /RATIONALE l 

LOSE  CAPABILITY  TO  DIRECTLY  SHUT  DOWN  THE  OME  DURING  A BURN. 

IF  A MALFUNCTION  OCCURRED,  LOW  PC  AND  DELTA  V,  THE  PLACEMENT  OF 
THE  ARM/PRESS  SWITCH  TO  THE  OFF  POSITION  WOULD 

TO  PERFORM  SHUT  DOWN.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  GPC  CMDS 
AS  THE  ONLY  METHOD  FOR  OME  SHUTDOWN. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-533 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  12/30/86 

SUBSYSTEM:  OMS 

MDAC  ID:  632 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

HDW/FUNC 

3/lR 

3/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS:  A [ 2 ] 


C [ P ] 


LOCATION: 
PART  NUMBER: 
TYPE  III 


AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

54V76A121AR  Jll-D  TYPE  III;  56V76A123AR  J6-MM  (135) 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

w'r.  ^ ELECTRICAL  PATHS  TO  OPEN  GN2  PRESS  ISOL 

P^sY  ISOL  EFFECT  IS  THE  SAME  AS  GN2 

LTpl/V^S?rT?^nTJ*'mi'^??  CLOSED  RESULTING  IN  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  START  CAPABILITY  FOR  BOTH  ENrTMP«? 

CONSIDERED  REDUNDANT  TO  GN2  ISOL  VLV)  THEREFORE 

STEUCTORAL  ANd°cg  SstrIin™ 


REFERENCES:  VS70-943099  REV  A EO  B12; 

976102  REV  F EO  G14 


MC621-0059  REV  E; 


VS70- 


REPORT  DATE  02/04/87 


C-534 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  12/30/86 

SUBSYSTEM;  OMS 
MDAC  ID;  633 

ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 

LEAD  ANALYST;  V.J.  BURKEMPER 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


SUBSYS  LEAD;  D.J.  PAUL 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/lR 

LIFTOFF; 

3/2R 

TAL; 

3/lR 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/lR 

ATO; 

3/lR 

LANDING/SAFING 

; 3/3 

REDUNDANCY  SCREENS; 

A [ 2 3 

B [ F ] 

c [ P 3 

LOCATION;  AV  BAY 

4,  LCA  1;  AV 

BAY  6,  LCA  3 

PART  NUMBER; 
TYPE  III 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  IS  NO  EFFECT  (GN2  PRESS  ISO  VLV  IS  STUCK  IN  THE 
OPEN  POSITION)  REGULATOR  LOCKS  UP  AND  STOPS  FLOW.  LOSS  OF  ALL 
REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF  DOWNSTREAM  LINES  OR 
DAMAGE  TO  COMPONENTS  RESULTING  IN  LOSS  OF  GN2  PRESSURANT  AND/OR 
INABILITY  TO  START  ENGINES. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-535 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/30/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/lR 

MDAC  ID: 

634 

ABORT: 

2/lR 

ITEM: 

DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  2 VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

2/lR 

LIFTOFF: 

3/2R 

TAL: 

2/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING: 

3/lR 

3/3 

ATO: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  AV  BAY  5 

, LCA  2;  AV 

BAY  4,  LCA  1 

PART  NUMBER:  55V76A122AR  J6-NN  TYPE  III;  54V76A121AR  Jll-E  TYPE 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  OPERATION  OF 
ENGINE  CONTROL  VALVES  1 AND  2. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME'S  THEREFORE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  LOSS  OF  DEORBIT  CAPABILITY  WHEN  ABOVE 
RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 
DURING  ABORTS  RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS;  ONE 
FAILURE  AWAY  FROM  LOSS  OF  ONE  OME  RESULTING  IN  INABILITY  TO 
PERFORM  DUMPS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-536 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

635 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  2 VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/lR  RTLS: 

LIFTOFF:  3/2R  TAL: 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/lR  ATO: 

LANDING/ SAFING:  3/lR 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/lR 

3/lR 

3/lR 

3/lR 


C [ P ] 


LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122AR  J6-NN  TYPE  III,*  54V76A121AR  Jll-E  TYPE 

III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


KFFSCTS /RATIONAIjE  l 

FAILURE  OF  DRIVER  RESULTS  IN  HAVING  TO  PLACE  EITHER  THE  ARM/PRESS 
SWITCH  OR  THE  ENG  VLV  SWITCH  IN  THE  OFF  POSITION  TO  CLOSE  ENG 
CONTROL  VLV  NO.  2.  FAILURE  OF  ALL  REDtJNDANCY  RESULTS  IN  ALL  ENG 
CONTROL  VLV’S  FAILED  OPEN  REQUIRING  THE  CLOSURE  OF  THE  TK  ^SO 
VLV'S  TO  STOP  THE  BURN.  OMS  PROPELLANT  OR  ENGINES  ARE  NO  LONGER 
AVAILABLE  SINCE  REOPENING  OF  THE  TK  ISO  VLV'S  COULD  RESULT  IN 
SEVERE  POD  DAMAGE. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-537 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/30/86 

SUBSYSTEM:  OMS 

MDAC  ID:  636 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1 VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


FLIGHT  PHASE 
PRE  LAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


CRITICALITIES 
HDW/FUNC  ABORT 

3/3  RTLS: 

3/2R  TAL: 

3/2R  AOA: 

3/lR  ATO: 


B [ F ] 


HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


C [ P ] 


MCATION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

P^T  NUMBER:  55V76A122AR  J6-MM  TYPE  III;  54V76A121AR  Jll-F  TYPE 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

operation  op  engine 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME'S  THEREFORE 

^^REDLINES  DEORBIT  CAPABILITY  WHEN  ABOVE 

INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 
ABORTS  RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS’  ONE 

PE^^  dSips^^°”  resulting  in  inability'  to 

F Iforr””  ““21-0059  REV  E;  VS70- 


REPORT  DATE  02/04/87 


C-538 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

637 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1 VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/lR 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/lR 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/SAFING 
REDUNDANCY  SCREENS; 

; 3/lR 

A [ 2 ] B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY 

PART  NUMBER:  55V76A122AR  J6-MM  TYPE 

4,  LCA  1 

III;  54V76A121AR  Jll-F  TYPE 

III 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FAILURE  OF  DRIVER  RESULTS  IN  HAVING  TO  PLACE  EITHER  THE  ARM/PRESS 
SWITCH  OR  THE  ENG  VLV  SWITCH  IN  THE  OFF  POSITION  TO  CLOSE  ENG 
CONTROL  VLV  NO.  2.  FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  ALL  ENG 
CONTROL  VLV'S  FAILED  OPEN  REQUIRING  THE  CLOSURE  OF  THE  TK  ISO 
VLV'S  TO  STOP  THE  BURN.  OMS  PROPELLANT  OR  ENGINES  ARE  NO  LONGER 
AVAILABLE  SINCE  REOPENING  OF  THE  TK  ISO  VLV'S  COULD  RESULT  IN 
SEVERE  POD  DAMAGE. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-539 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

638 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/lR 

ATO: 

LANDING/SAFING ; 

3/3 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS;  A[2]  B[F]  C[P] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122AR  J3-93  TYPE  III;  54V76A121AR  J3-93  TYPE 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  OPERATION  OF 
ENGINE  CONTROL  VALVES  1 AND  2.  ur 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME'S  THEREFORE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  LOSS  OF  DEORBIT  CAPABILITY  WHEN  ABOVE 
RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 
DURING  ABORTS  RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS;  ONE 
FAILURE  AWAY  FROM  LOSS  OF  ONE  OME  RESULTING  IN  INABILITY  TO 
PERFORM  DUMPS. 

REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-540 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

639 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
LEAD  ANALYST: 


DRIVER,  HYBRID 
FAILS  HIGH 

V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING 

3/3 
: 3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

[ F ] 

C [ P ] 

LOCATION:  AV  BAY 

5,  LCA  2;  AV 

BAY 

4,  LCA  1 

PART  NUMBER:  55V76A122AR  J3-93  TYPE  III;  54V76A121AR  J3-93  TYPE 

III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  CAPABILITY  TO  DIRECTLY  SHUT  DOWN  THE  OME  DURING  A BURN. 

IF  A MALFUNCTION  OCCURRED,  LOW  PC  AND  DELTA  V,  THE  PLACEMENT  OF 
THE  ARM/PRESS  SWITCH  TO  THE  OFF  POSITION  WOULD  INSTRUCT  THE  GPC 
TO  PERFORM  SHUT  DOWN.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  GPC 
CMDS  AS  THE  ONLY  METHOD  FOR  OME  SHUTDOWN. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-541 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/30/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/lR 

MDAC  ID: 

640 

ABORT: 

3/lR 

ITEM: 

DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/lR 

3/3 

ATO: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

[ F ] 

C [ P ] 

LOCATION:  AV  BAY  5 

, LCA  2;  AV 

BAY 

4,  LCA  1 

III 


55V76A122AR  J6-KK  TYPE  III;  54V76A121AR  Jll-G  TYPE 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  TO  OPEN  GN2  PRESS  ISOL 
VALVE.  FOR  LOSS  OF  ALL  REDUNDANCY  EFFECT  IS  THE  SAME  AS  GN2 
PRESS  ISOL  VLV  FAILING  CLOSED  RESULTING  IN  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  LOSS  OF  START  CAPABILITY  FOR  BOTH  ENGINES 
(ACCUMULATOR  IS  CONSIDERED  REDUNDANT  TO  GN2  ISOL  VLV)  THEREFORE 
POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  CG  CONSTRAINTS 
DURING  DEORBIT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC62 1-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-542 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 

12/30/86 

OMS 

641 

HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 

HDW/FUNC 

3/lR 

3/lR 

ITEM: 

DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/lR 

LIFTOFF: 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

. C [ P ] 

LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122AR  J6-KK  TYPE  III;  54V76A121AR  Jll-G  TYPE 

III 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE; 

FIRST  FAILURE  IS  NO  EFFECT  (GN2  PRESS  ISOL  VLV  IS  STUCK  IN  THE 
OPEN  POSITION)  REGULATOR  LOCKS  UP  AND  STOPS  FLOW.  LOSS  OF  ALL 
REDUNDANCY  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF  DOWNSTREAM  LINES  OR 
DAMAGE  TO  COMPONENTS  RESULTING  IN  LOSS  OF  GN2  PRESSURANT  AND/OR 
INABILITY  TO  START  ENGINES. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-543 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

642 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  FILL/VENT  VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121AR  Jll-K'  TYPE  III;  54V76A123AR  Jll-GG 

(129)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ABILITY  TO  OPEN  GN2  FILL/VENT  VALVE.  WORST  CASE  EFFECT 
WOULD  BE  A LAUNCH  DELAY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-544 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  12/30/86 

SUBSYSTEM:  OMS 

MDAC  ID:  643 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST;  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  FILL/VENT  VLV 

6)  DRIVER,  HYBRID 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/lR 

LIFTOFF; 

3/2R 

TAL: 

3/lR 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO; 

3/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [NA  ] 

C [ P ] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121AR  Jll-K'  TYPE  III;  54V76A123AR  Jll-GG 

(129)  TYPE  III 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

THE  FAILURE'S  END  RESULT  WOULD  BE  A STUCK  OPEN  FILL/VENT  VALVE. 
THERE  ARE  TWO  REMAINING  SEALS  TO  PROTECT  THE  SYSTEM  FROM  GN2 
LOSS.  FOR  LOSS  OF  ALL  REDUNDANCY,  POSSIBLE  LOSS  OF  VEHICLE/LIFE 
DUE  TO  LOSS  OF  BOTH  OME  START  CAPABILITY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-545 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

644 


ITEM:  FUSE,  lA 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6)  FUSE,  lA 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B C F ] 

LOCATION:  PNL  014  S9;  PNL  016  S7 

PART  NUMBER:  33V73A14F13;  33V73A16F11 


HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  OPERATION  OF 
ENGINE  CONTROL  VALVES  1 AND  2. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME'S  THEREFORE 
LOSS  OF  VEHICLE/ LIFE  DUE  TO  LOSS  OF  DEORBIT  CAPABILITY  WHEN  ABOVE 
RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 
DURING  ABORTS  RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS;  ONE 
FAILURE  AWAY  FROM  LOSS  OF  ONE  OME  RESULTING  IN  INABILITY  TO 
PERFORM  DUMPS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-546 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/30/86 

OMS 

645 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

2/lR 

2/lR 


ITEM; 

FAILURE  MODE; 
LEAD  ANALYST; 


FUSE,  lA 
FAILS  OPEN 

V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV  & GN2  ENG  CNTRL  1/2  VLV  & OME  PURGE 
1/2  VLVS 

6)  FUSE,  lA 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING : 

REDUNDANCY  SCREENS; 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 
2/2 
3/3 
2/lR 
3/3 

A [ 2 ] 


RTLS; 

TAL; 

AOA; 

ATO; 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

2/lR 


C [ P ] 


LOCATION;  PNL  C3A1  SI;  S2 

PART  NUMBER;  35V73A3A1F1;  F3 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  PURGE  CAPABILITY  FOR  ASSOCIATED 
LT/RT  OME.  IF  A 2ND  FAILURE  OCCURS  IN  THE  OTHER  POD'S  ARM/PRESS 
SYSTEM  DURING  AN  OMS  BURN  TRIGGERING  THE  FDI  SYSTEM  AND  REQUIRING 
MANUAL  SHUTDOWN,  THE  OMS  RM  WOULD  INCORRECTLY  SHUTDOWN 
GOOD  POD  AND  NOT  PERFORM  THE  OME  GN2  PURGE.  THE  RESULT  WOULD  BE 
A FAILED  POD  WHICH  CANNOT  BE  USED  AND  A GOOD  POD  WHICH  CANNOT  BE 
USED  FOR  10  MINUTES.  THIS  COULD  CAUSE  YOU  TO  MISS 
DESIRED  TARGETS  DURING  OMS  1 INSERTION  OR  CAUSE  AN  OVERSHOOT  OF 
THE  LANDING  SITE  DURING  DEORBIT  RESULTING  IN  POSSIBLE  LOSS  OF 
LIFE/VEHICLE.  FOR  A MANUAL  TAL  THE  LOSS  OF  THE  PURGE  RESULTS  IN 
AN  INABILITY  TO  PERFORM  TIME  CRITICAL  PROP  DUMPS. 

REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-547 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

646 


ITEM:  FUSE,  lA 

FAILURE  MODE;  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  2/lR 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  FUSE,  lA 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL; 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/lR 

ATO; 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ F ] 

LOCATION;  PNL  014  S9;  PNL  016  S7 

PART  NUMBER;  33V73A14F14;  33V73A16F12 


HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  OPERATION  OF 
ENGINE  CONTROL  VALVES  1 AND  2. 

THE  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME'S 
THEREFORE  LOSS  OF  VEHICLE/LIFE  DUE  TO  LOSS  OF  DEORBIT  CAPABILITY 
WHEN  ABOVE  RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL 
OMS  DUMP  DURING  ABORTS  RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP 
TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS; 
ONE  FAILURE  AWAY  FROM  LOSS  OF  ONE  OME  RESULTING  IN  INABILITY  TO 
PERFORM  DUMPS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-548 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

647 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  FUSE,  lA 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY : 

1)  ELECTRICAL  COMPONENTS 
CONTROLS 
OME  SUBSYSTEM 
G1T2  ASSEMBLY 

GN2  ENG  PRESS  ISOL  VLV  & GN2  ENG  CNTRL  1/2  VLV  & OME  PURGE 

1/2  VLVS 

6)  FUSE,  lA 

7) 

8) 

9) 


2) 

3) 

4) 

5) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 
2/2 
3/3 
2/lR 
3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

2/lR 


C [ P ] 


LOCATION:  PNL  C3A1  SI;  S2 

PART  NUMBER:  35V73A3A1F2;  F4 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


in  loss  of  poege  capability  for  associated 

LT/RT  OME.  IF  A 2ND  FAILURE  OCCURS  IN  THE  OTHER  POD'S  ARM/PRESS 
SYSTEM  DURING  AN  OMS  BURN  TRIGGERING  THE  FDI  SYSTEM  AND  REQUIRING 
MANUAL  SHUTDOWN,  THE  OMS  RM  WOULD  INCORRECTLY  SHUTDOWN 
THE  GOOD  POD  AND  NOT  PERFORM  THE  OME  GN2  PURGE.  THE  RESULT  WOULD 
BE  A FAILURED  POD  WHICH  CANNOT  BE  USED  AND  A GOOD  POD  WHICH 
CANNOT  BE  USED  FOR  10  MINUTES.  THIS  COULD  CAUSE  YOU  TO  MISS 
DESIRED  TARGETS  DURING  OMS  1 INSERTION  OR  CAUSE  AN  OVERSHOOT  OF 
THE  LANDING  SITE  DURING  DEORBIT  RESULTING  IN  POSSIBLE  ^SS  OF 
VEHICLE/LIFE.  FOR  A MANUAL  TAL  THE  LOSS  OF  THE  PURGE  RESULTS  IN 
AN  INABILITY  TO  PERFORM  TIME  CRITICAL  PROP  DUMPS. 


REFERENCES:  VS70-943099  REV  A EO  B12; 
976102  REV  F EO  G14;  FSSR  STS83-0010A 
81-0026  CR29378A 


MC621-0059  REV  E;  VS70- 
PART  D 30  JUNE  85;  FSSR  STS 


REPORT  DATE  02/04/87 


C-549 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/30/86 

SUBSYSTEM:  OMS 

MDAC  ID:  648 

ITEM:  FUSE,  3 A 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1 VLV 

6)  FUSE,  3A 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


HDW/FUNC 

3/3 

3/2R 

3/2R 

3/lR 

3/3 


^KJ.TXCALITIES 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


C [ P ] 


REDUNDANCY  SCREENS:  A[2]  B[F]  C[P] 

MOTION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  54V76A121  Jll-E';  56V76A123  J6-NN  (133) 

^OCKf'ovSlO^^^^^^^^'  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

EFFECTS/RATIONALE : 

^°UNDANCY  results  in  loss  of  both  OME'S  therefore 

^rREDL?N?l‘?^n  deorbit  CAPABILITY  WHEN  ABOVE 

RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 

RESULTING  IN  POSSIBLE  VIOLATION  OF  ^p  ?Lk 
STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS*  ONE 

PFBPfSS  RESULTING  IN  INABILITY^  TO 

ir£«Kr  ORM  DUMPS « 

F Eo’g°i1''°”  "EV  E;  VS70- 


REPORT  DATE  02/04/87 


C-550 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/30/86 

OMS 

649 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  2/lR 


ITEM;  FUSE,  3 A 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  2 VLV 

6)  FUSE,  3A 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

2/lR 

LIFTOFF; 

3/2R 

TAL; 

2/lR 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/lR 

ATO; 

3/lR 

LANDING/SAFING 

; 3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B 

[ F ] 

C [ P ] 

LOCATION;  AV  BAY 

5,  LCA  2; 

AV  BAY 

4,  LCA  1 

PART  NUMBER;  54V76A121  Jll-F' 

; 56V76A123  J6-PP 

(132) 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  OPERATION  OF 
ENGINE  CONTROL  VALVES  1 AND  2. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME'S  THEREFORE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  LOSS  OF  DEORBIT  CAPABILITY  WHEN  ABOVE 
RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 
DURING  ABORTS  RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS;  ONE 
FAILURE  AWAY  FROM  LOSS  OF  ONE  OME  RESULTING  IN  INABILITY  TO 
PERFORM  DUMPS. 

REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-551 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/30/86 

OMS 

650 


ITEM:  FUSE,  3A 

FAIIURE  MODE;  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT;  2/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  FUSE,  3A 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH : 3/3  RTLS : 

LIFTOFF:  3/2R  TAL; ’ 

ONORBIT:  3/2R  AOA; 

DEORBIT;  3/lR  ATO: 

LANDING/SAFING;  3/3 


HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS;  A [ 2 ] B [ F ] ( 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122  J6-NN;  54V76A  Jll-E  (121) 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE ; 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  OPERATION  OF 
ENGINE  CONTROL  VALVES  1 AND  2. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME'S  THEREFORE 

LOSS  OF  DEORBIT  CAPABILITY  WHEN  ABOVE 
RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 

during  aborts  resulting  in  possible  violation  of  prop  tank 

STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS;  ONE 
FAILURE  AWAY  FROM  LOSS  OF  ONE  OME  RESULTING  IN  INABILITY  TO 
PERFORM  DUMPS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-552 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

651 


ITEM:  FUSE,  3 A 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

2/lR 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

ELECTRICAL  COMPONENTS 

2) 

CONTROLS 

3) 

OME  SUBSYSTEM 

4) 

GN2  ASSEMBLY 

5) 

GN2  ENG  CNTRL  1/2  VLVS 

6) 

FUSE,  3 A 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ F ] 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


C [ P ] 


LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122  J6-MM;  54V76A  Jll-F  ^121) 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  OPERATION  OF 
ENGINE  CONTROL  VALVES  1 AND  2. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  BOTH  OME'S  THEREFORE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  LOSS  OF  DEORBIT  CAPABILITY  WHEN  ABOVE 
RCS  REDLINES  AND  INABILITY  TO  COMPLETE  TIME  CRITICAL  OMS  DUMP 
DURING  ABORTS  RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK 
STRUCTURAL  AND  ORBITER  ENTRY  CG  CONSTRAINTS.  FOR  ABORTS;  ONE 
FAILURE  AWAY  FROM  LOSS  OF  ONE  OME  RESULTING  IN  INABILITY  TO 
PERFORM  DUMPS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-553 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

652 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1/2  VLVS 

6)  RESISTOR,  1.2K  2W 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL; 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

LANDING/SAFING; 

3/3 

3/3 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] B [ ] C [ 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER;  54V76A121  J8-24;  56V76A123R  J8-24  (101) 


CAUSES:  CONTAMINATION, 

SHOCK,  OVERLOAD 


VIBRATION,  MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE : 

LOSE  TALKBACK  FOR  ENGINE  PURGE  VALVE, 
DETERMINED  BY  MONITORING  ENGINE  AND  N2 


OPERATION  CAN  BE  INDIRECTLY 
TANK  PRESSURE  SENSORS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-554 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

653 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1/2  VLVS 

6)  RESISTOR,  1.2K  2W 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ •] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121  J8-24;  56V76A123R  J8-24  (101) 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-555 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/30/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/3 

MDAC  ID: 

654 

ABORT: 

3/3 

ITEM: 

RESISTOR,  1.2K  2W 

FAILURE  MODE 

::  FAILS  OPEN 

LEAD  ANALYST 

':  V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV  & GN2  ENG  CNTRL  1 VLV 

6)  RESISTOR,  1.2K  2W 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC  ABORT  HDW/FUNC 


3/3 

RTLS: 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

C ] 

B [ 

] 

c [ 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121  J8-41;  56V76A123  J8-26 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

TALKBACKS  FOR  THE  ENGINE  CONTROL  NO.  1 AND  ENGINE  PRESS  ISOL 
VALVES  WOULD  FALSELY  INDICATE  VALVES  FAILED  CLOSED.  THE  ENGINE 
CONTROL  VALVE  OPERATION  CAN  BE  DETERMINED  BY  MONITORING  OME 
OPERATION. 

A FALSE  INDICATION  OF  AN  ENGINE  PRESS  ISOL  VALVE  FAILED  CLOSE 
COULD  RESULT  IN  FAILING  THE  ASSOCIATED  OME  FOR  ALL  BURNS  EXCEPT 
DEORBIT,  NO  EFFECT  ON  MISSION. 

LOSS  OF  ALL  REDUNDANCY  WOULD  FALSELY  INDICATE  A FAILURE  IN  BOTH 
OME'S  GN2  SYSTEM.  AT  THIS  POINT  THE  NEXT  OMS  BURN  SHOULD  BE 
PERFORMED  WITH  SETP,  FOR  DETERMINATION  OF  OME  HEALTH,  NO  EFFECT 
ON  MISSION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-556 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

655 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  2 VLV 

6)  RESISTOR,  1.2K  2W 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS;  A 

[ 

] 

B [ 

] 

c [ ] 

LOCATION:  AV  BAY  4, 

LCA 

1; 

AV  BAY  6, 

LCA  3 

PART  NUMBER:  54V76A121 

J8- 

41; 

56V76A123 

J8-26 

CAUSES:  CONTAMINATION, 

VIBRATION,  MECHANICAL 

SHOCK,  THERl 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  SIGNAL  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-557 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

656 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  2 VLV 

6)  RESISTOR,  1.2K  2W 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122  J8-26;  54V76A121  J8-26 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE: 

IX)SE  VALVE  TALKBACK.  VALVE  OPERATION  CAN  BE  DETERMINED  BY 
MONITORING  BALL  VALVE  POSITION  INDICATOR.  FOR  LOSS  OF  ALL 

REDUNDANCY,  VALVE  POSITION  CAN  BE  INDIRECTLY  DETERMINED  FROM  OME 
OPERATION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-558 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

657 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  2 VLV 

6)  RESISTOR,  1.2K  2W 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

LIFTOFF: 

ONORBIT: 

DEORBIT: 

LANDING/SAFING: 

REDUNDANCY  SCREENS ; A 


3/3 

RTLS: 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

[ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122  J8-26;  54V76A121  J8-26 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  SIGNAL  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-559 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/30/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT: 

3/3 

MDAC  ID; 

658 

ABORT; 

3/3 

ITEM; 

FAILURE  MODE 

RESISTOR,  5. IK 
; FAILS  OPEN 

1/4W 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  RESISTOR,  5. IK  1/4W 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/SAFING; 

REDUNDANCY  SCREENS; 

LOCATION:  AV  BAY  4 

PART  NUMBER;  54V76A12 


CRITICALITIES 


DW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

[ ] 

B [ ] 

c [ ] 

LCA  1; 

AV  BAY  6,  LCA  3 

J2-16; 

56V76A123R  J2-5 

(102) 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK 
SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE ; 

THE  TALKBACK  FOR  THE  LT/RT  OMS  ENGINE  VLV  CREW  SWITCH  WOULD 
^A^ELY  indicate  a switch  FAILURE.  ACTUAL  ABILITY  TO  PERFORM  AN 
OMS  BURN  WITH  ASSOCIATED  ENGINE  IS  UNKNOWN  UNTIL  A BURN  IS 
PERFORMED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-560 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

659 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  RESISTOR,  5. IK  1/4W 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS:  A 

[ ] 

B [ 

] 

c [ 

LOCATION:  AV  BAY  4, 

LCA  1; 

AV  BAY  6, 

LCA  3 

PART  NUMBER:  54V76A121  J2-16;  56V76A123R  J2-5  (102) 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  TALKBACK  FOR  THE  OMS  ENGINE  VLV  CREW  SWITCH  STILL 
AVAILABLE. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-561 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

12/30/86 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/3 

MDAC  ID: 

660 

ABORT: 

3/3 

ITEM: 

RESISTOR,  5. IK  1/4W 

FAILURE  MODE 

: FAILS  OPEN 

LEAD  ANALYST 

: V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6)  RESISTOR,  5.  IK  1/4W 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121  J2-17  TO  GND;  56V76A123  J2-6  TO  GND 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  SIGNAL  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-562 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

661 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY : 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6)  RESISTOR,  5. IK  1/4W 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

2/2 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING 

2/lR 
: 3/3 

ATO: 

2/lR 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY 

4,  LCA  1;  AV 

BAY 

6,  LCA  3 

PART  NUMBER:  54V76A121  J2-17  TO  GND;  56V76A123  J2-6  TO  GND 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT.  A 2ND  FAILURE  OCCURS  IN  THE  OTHER 
POD'S  ARM/PRESS  SYSTEM  DURING  AN  OMS  BURN  TRIGGERING  THE  FDI 
SYSTEM  AND  REQUIRING  MANUAL  SHUTDOWN.  THE  OMS  RM  WOULD 
INCORRECTLY  SHUTDOWN  THE  GOOD  POD  AND  NOT  PERFORM  THE  OME  GN2 
PURGE.  THE  RESULT  WOULD  BE  A FAILED  POD  WHICH  CANNOT  BE  USED  AND 
A GOOD  POD  WHICH  CANNOT  BE  USED  FOR  10  MINUTES.  THIS  COULD 
CAUSE  YOU  TO  MISS  DESIRED  TARGETS  DURING  OMS  1 INSERTION  OR  CAUSE 
AN  OVERSHOOT  OF  THE  LANDING  SITE  DURING  DEORBIT  RESULTING  IN 
POSSIBLE  LOSS  OF  VEHICLE/LIFE. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-563 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID; 


12/30/86 

OMS 

662 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  2/lR 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1/2  VLVS 

6)  RESISTOR,  5.  IK  1/4W 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

2/2 

TAL; 

ONORBIT: 

3/3 

AOA; 

DEORBIT; 

2/lR 

ATO; 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B 

[ P ] 

LOCATION;  AV  BAY  4 

, LCA  1; 

AV  BAY 

6.  LCA  ; 

PART  NUMBER;  54V76A121  J2-18; 

56V76A123  J2-7 

HDW/FUNC 

3/3 

3/3 

3/3 

2/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE : 

failure  results  in  loss  OF  PURGE  CAPABILITY  FOR  ASSOCIATED 
^ FAILURE  OCCURS  IN  THE  OTHER  POD'S  ARM/PRESS 

SYSTEM  DURING  AN  OMS  BURN  TRIGGERING  THE  FDI  SYSTEM  AND  REQUIRING 
MANUAL  SHUTDOWN.  THE  OMS  RM  WOULD  INCORRECTLY  SHUTDOWN 
THE  GOOD  POD  AND  NOT  PERFORM  THE  OME  GN2  PURGE.  THE  RESULT  WOULD 
BE  A FAILED  POD  WHICH  CANNOT  BE  USED  AND  A GOOD  POD  WHICH  CANNOT 
BE  USED  FOR  10  MINUTES.  THIS  COULD  CAUSE  YOU  TO  MISS 
DESIRED  TARGETS  DURING  OMS  1 INSERTION  OR  CAUSE  AN  OVERSHOOT  OF 
THE  LANDING  SITE  RESULTING  IN  POSSIBLE  LOSS  OF  VEHICLE/LIFE.  FOR 
A MANUAL  TAL  THE  LOSS  OF  THE  PURGE  RESULTS  IN  AN  INABILITY  TO 
PERFORM  TIME  CRITICAL  PROP  DUMPS. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-564 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

663 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  OME  PURGE  1/2  VLVS 

6)  RESISTOR,  5. IK  1/4W 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 

PART  NUMBER:  54V76A121  J2-18;  56V76A123  J2-7 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  SIGNAL  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-565 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
2/lR 
2/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  RESISTOR,  5.  IK  1/4W 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

664 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


RESISTOR,  5.  IK  1/4W 
FAILS  OPEN 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 

3/3  RTLS: 

2/2  TAL: 

3/3  AOA: 

2/lR  ATO: 

3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

2/lR 


REDUNDANCY  SCREENS:  A [ 3 ] 


B [ P ] 


C [ P ] 


LOCATION: 
PART  NUMBER: 


AV  BAY  4,  LCA  1;  AV  BAY  6,  LCA  3 
54V76A121  J2-17  TO  J3-108;  56V76A123  J2-6 


CAUSES:  CONTAMINATION, 

SHOCK,  OVERLOAD 


VIBRATION,  MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE : 

FAILURE  IS  NO  EFFECT.  A 2ND  FAILURE  OCCURS  IN  THE  OTHER 
POD  S ARM/PRESS  SYSTEM  DURING  AN  OMS  BURN  TRIGGERING  THE  FDT 
SYSTEM  AND  REQUIRING  MANUAL  SHUTDOWN.  ^ ^ 

SHUTDOWN  THE  GOOD  POD  AND  NOT  PERFORM  THE  OME  GN2 
PURGE.  THE  RESULT  WOULD  BE  A FAILED  POD  WHICH  CANNOT  BE  USED  AND 

“ OSED  FOR  10  “uS 

desired  targets  during  OMS  1 INSERTION  OR  CAUSE 
LANDING  SITE  DURING  DEORBIT  RESULTING  IN 
POSSIBLE  LOSS  OF  VEHICLE/LIFE. 


^FERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV 

976102  REV  F EO  G14 


E; 


VS70- 


REPORT  DATE  02/04/87 


C-566 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

665 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


item:  resistor,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 


2) 

CONTROLS 

3) 

OME  SUBSYSTEM 

4) 

GN2  ASSEMBLY 

5) 

GN2  ENG  CNTRL  1/2  VLVS 

6) 

RESISTOR,  5. IK  1/4W 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH:  3/3 

RTLS: 

3/3 

LIFTOFF:  3/3 

TAL: 

3/3 

ONORBIT:  3/3 

AOA: 

3/3 

DEORBIT:  3/3 

ATO: 

3/3 

LANDING/SAFING;  3/3 

REDUNDANCY  SCREENS:  A [ 

] 

B [ 

] 

c [ ] 

LOCATION:  AV  BAY  4,  LCA 

l;  AV 

BAY  6, 

LCA  3 

PART  NUMBER:  54V76A121  J2-17  TO  J3-108;  56V76A123  J2-6 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  SIGNAL  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-567 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

666 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT:  2/lR 


ITEM;  RESISTOR,  5. IK  1/4W 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLVS 

6)  RESISTOR,  5. IK  1/4W 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH ; 3/3  RTLS ; 

LIFTOFF;  2/2  TAL; * 

ONORBIT:  3/3  AOA; 

DEORBIT;  2/lR  ATO; 

LANDING/SAFING;  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

2/lR 


REDUNDANCY  SCREENS:  A[3]  B[P]  C[P] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122  J2-6  TO  GND;  54V76A121  J2-6  TO  GND 


CAUSES;  CONTAMINATION, 
SHOCK,  OVERLOAD 


VIBRATION,  MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE; 

FIRST  FAILURE  IS  NO  EFFECT.  A 2ND  FAILURE  OCCURS  IN  THE  OTHER 
POD'S  ARM/PRESS  SYSTEM  DURING  AN  OMS  BURN  TRIGGERING  THE  FDI 
SYSTEM  AND  REQUIRING  MANUAL  SHUTDOWN.  THE  OMS  RM  WOULD 
INCORRECTLY  SHUTDOWN  THE  GOOD  POD  AND  NOT  PERFORM  THE  OME  GN2 
PURGE.  THE  RESULT  WOULD  BE  A FAILED  POD  WHICH  CANNOT  BE  USED  AND 
A GOOD  POD  WHICH  CANNOT  BE  USED  FOR  10  MINUTES.  THIS  COULD 
^USE  YOU  TO  MISS  DESIRED  TARGETS  DURING  OMS  1 INSERTION  OR  CAUSE 
AN  OVERSHOOT  OF  THE  LANDING  SITE  DURING  DEORBIT  RESULTIN  IN 
POSSIBLE  LOSS  OF  VEHICLE/LIFE. 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 
976102  REV  F EO  G14,  FSSR  STS  83,0010A,  PART  D,  30  JUNE  85;  FSSR 
STS  81-0026  CR29378A 


REPORT  DATE  02/04/87 


C-568 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

667 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 


2) 

CONTROLS 

3) 

OME  SUBSYSTEM 

4) 

GN2  ASSEMBLY 

5) 

GN2  ENG  PRESS  ISOL  VLV 

6) 

RESISTOR,  5. IK  1/4W 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

2/2 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

2/lR 

ATO: 

2/lR 

LANDING/SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY 

5,  LCA  2;  AV  BAY 

4,  LCA  1 

PART 

NUMBER:  55V76A122  J2-6  TO  J3-94; 

54V76A121 

J2-6 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  NO  EFFECT.  A 2ND  FAILURE  OCCURS  IN  THE  OTHER  POD  S 
ARM/PRESS  SYSTEM  DURING  AN  OMS  BURN  TRIGGERING  THE  FDI  SYSTEM  AND 
REQUIRING  MANUAL  SHUTDOWN.  THE  OMS  RM  WOULD 

INCORRECTLY  SHUTDOWN  THE  GOOD  POD  AND  NOT  PERFORM  THE  OME  GN2 
PURGE.  THE  RESULT  WOULD  BE  A FAILED  POD  WHICH  CANNOT  BE  USED  AND 
A GOOD  POD  WHICH  CANNOT  BE  USED  FOR  10  MINUTES.  THIS  COULD 
CAUSE  YOU  TO  MISS  DESIRED  TARGETS  DURING  OMS  1 INSERTION  OR  CAUSE 
AN  OVERSHOOT  OF  THE  LANDING  SITE  DURING  DEORBIT  RESULTING  IN 
POSSIBLE  LOSS  OF  VEHICLE/LIFE. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14,  FSSR  STS  83,0010A,  PART  D,  30  JUNE  85;  FSSR 
STS  81-0026  CR29378A 


REPORT  DATE  02/04/87 


C-569 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

668 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILITRE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6)  RESISTOR,  5.  IK  1/4W 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO; 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A 


B C ] C [ ] 


LOCATION: 
PART  NUMBER; 


AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 
55V76A122  J2-6  TO  J3-94;  54V76A121  J2-6 


CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  SIGNAL  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12; 

976102  REV  F EO  G14,  FSSR  STS  83,0010A, 
STS  81-0026  CR29378A 


MC621-0059  REV  E;  VS70- 
PART  D,  30  JUNE  85;  FSSR 


REPORT  DATE  02/04/87 


C-570 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  12/30/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  669  ABORT:  3/3 

ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 


1) 

ELECTRICAL  COMPONENTS 

2) 

CONTROLS 

3) 

OME  SUBSYSTEM 

4) 

GN2  ASSEMBLY 

5) 

GN2  ENG  CNTRL  1/2  VLVS 

6) 

RESISTOR,  5. IK  1/4W 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 


LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122  J2-6  TO  GND;  54V76A121  J2-6  TO  GND 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  SIGNAL  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14 


REPORT  DATE  02/04/87 


C-571 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

670 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  2/lR 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6)  RESISTOR,  5.  IK  1/4W 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF;  2/2  TAL; ’ 

ONORBIT;  3/3  AOA* 

DEORBIT;  2/lR  ATO; 

LANDING/ SAFING;  3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER;  55V76A122  J2-7;  54V76A121  J2-7 


HDW/FUNC 

3/3 

3/3 

3/3 

2/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  PURGE  CAPABILITY  FOR  ASSOCIATED 
LT/RT  OME.  A 2ND  FAILURE  OCCURS  IN  THE  OTHER  POD'S  ARM/PRESS 
SYSTEM  DURING  AN  OMS  BURN  TRIGGERING  THE  FDI  SYSTEM  AND  REQUIRING 
MANUAL  SHUTDOWN.  THE  OMS  RM  WOULD  INCORRECTLY  SHUTDOWN  THE 
GOOD  POD  AND  NOT  PERFORM  THE  OME  GN2  PURGE.  THE  RESULT  WOULD  BE 
A FAILURED  POD  WHICH  CANNOT  BE  USED  AND  A GOOD  POD  WHICH  CANNOT 
BE  USED  FOR  10  MINUTES.  THIS  COULD  CAUSE  YOU  TO  MISS 
DESIRED  TARGETS  DURING  OMS  1 INSERTION  OR  CAUSE  AN  OVERSHOOT  OF 
THE  LANDING  SITE  RESULTING  IN  POLLIBLE  LOSS  OF  VEHICLE/LIFE.  FOR 
A MANUAL  TAL  THE  LOSS  OF  THE  PURGE  RESULTS  IN  AN  INABILITY  TO 
PERFORM  TIME  CRITICAL  PROP  DUMPS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14;  FSSR  STS83-0010A  PART  D 30  JUNE  85;  FSSR  STS 
81-0026  CR29378A 


REPORT  DATE  02/04/87 


C-572 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


12/30/86 

OMS 

671 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV 

6)  RESISTOR,  5. IK  1/4W 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL; 

ONORBIT:  3/3  AOA; 

DEORBIT;  3/3  ATO: 

LANDING/ SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A 


B t ] C [ ] 


LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  4,  LCA  1 

PART  NUMBER:  55V76A122  J2-7;  54V76A121  J2-7 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  SIGNAL  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14,  FSSR  STS  83,0010A,  PART  D,  30  JUNE  85;  FSSR 
STS  81-0026  CR29378A 


REPORT  DATE  02/04/87 


C-573 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

672 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


item:  switch,  OMS  LT/RT  ENG  ARM/PRESS  (C3A1,  S1/S2) 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  ARM/PRESS  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 
4}  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV  & GN2  ENG  CONTRL  1/2  VLVS  & OME  PURGE 
1/2  VLVS 

6)  SWITCH,  OMS  LT/RT  ENG  ARM/PRESS  (C3A1,  S1/S2) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/2R 

3/2R 

3/lR 

3/3 

ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/lR 

3/lR 

3/3 

3/lR 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  PNL  C3A1 

PART  NUMBER:  35V73A3A1-S1;  S2 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE: 

LOSE  CAPABILITY  TO  INHIBIT  THE  LT/RT  ENGINE  PURGE  AFTER  AN  OME 
BURN  AND  TO  CLOSE  LT/RT  GN2  PRESS  ISOL  VLV.  ON/OFF  SELECTION 
STILL  AVAILABLE  THROUGH  LT/RT  OMS  ENG  VLV  SWITCH  S9/S7.  NO 
MISSION  IMPACT.  ^ ' 

LOSS  OF  ALL  REDUNDANCY  IS  THE  SAME  EFFECT  AS  GN2  PRESS  ISOL  VLV 
FAILING  OPEN  (FAILS  TO  CLOSE)  RESULTING  IN  POSSIBLE  LOSS  OF 
LIFE/VEHICLE  DUE  TO  OVERPRESSURIZATION  AND  POSSIBLE  RUPTURE  OF 
DOWNSTREAM  LINES  OR  DAMAGE  TO  COMPONENTS  RESULTING  IN  LOSS  OF  GN2 
PRESSURANT  AND/OR  INABILITY  TO  START  ENGINES. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14;  MF0004-400  REV  C (EEE  PL) 


REPORT  DATE  02/04/87 


C-574 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

673 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  2/lR 


ITEM: 

FAILURE  MODE: 


SWITCH,  OMS  LT/RT  ENG  ARM/PRESS  (C3A1,  S1/S2) 
FAILS  TO  SWITCH  (STUCK  IN  ARM  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  PRESS  ISOL  VLV  & GN2  ENG  CONTRL  1/2  VLVS  & OME  PURGE 
1/2  VLVS 

6)  SWITCH,  OMS  LT/RT  ENG  ARM/PRESS  (C3A1,  S1/S2) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO: 

LANDING/ S AFING : 

3/3 

HDW/FUNC 

2/lR 

2/lR 

3/3 

3/lR 


REDUNDANCY  SCREENS:  A[2]  B[F]  C[P] 


LOCATION:  PNL  C3A1 

PART  NUMBER:  35V73A3A1-S1;  S2 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  IS  NO  EFFECT,  REMAINING  ENGINE  START  (IN 
ACCUMULATOR)  SAVED  FOR  DEORBIT.  LOSS  OF  ALL  REDUNDANCY  IS  THE 
SAME  EFFECT  AS  GN2  ISOL  VLV  FAILING  CLOSED  RESULTING  IN  POSSIBLE 
LOSS  OF  LIFE/VEHICLE  DUE  TO  LOSS  OF  START  CAPABILITY  FOR  BOTH 
ENGINES.  WITH  FIRST  FAILURE  DURING  RTLS  OR  TAL,  ONE  FAILURE 
(ACCUMULATOR)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE  DUE  TO 
LOSS  OF  ENGINE  AND  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP 
RESULTING  IN  POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND 
ORBITER  ENTRY  CG  CONSTRAINTS.  ACCUMULATOR  PROVIDES  FAIL-SAFE 
PROTECTION  FOR  UPSTREAM  FAILURES  AND  IS  CONSIDERED  REDUNDANT. 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14;  MF0004-400  REV  C (EEE  PL) 


REPORT  DATE  02/04/87 


C-575 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

674 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

1/1 


ITEM:  SWITCH,  OMS  LT/RT  ENG  ARM/PRESS  (C3A1,  S1/S2) 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  OFF  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

1/2  VLVS  PRESS  ISOL  VLV  & GN2  ENG  CONTRL  1/2  VLVS  & OME  PURGE 

6)  SWITCH,  OMS  LT/RT  ENG  ARM/PRESS  (C3A1,  S1/S2) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT; 

2/2 

AOA: 

DEORBIT: 

2/lR 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

LOCATION;  PNL  C3A1 

PART  NUMBER;  35V73A3A1 

-SI;  S2 

HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  AN  INABILITY  TO  OPERATE  THE  ASSOCIATED  LT/RT  BI-PROP 
BALL  VLV  RESULTING  IN  LOSS  OF  ONE  ENGINE.  ONE  FAILURE  (RT/LT 
ARM/PRESS  SWITCH  FAILURE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  BOTH  ENGINES  AND  THEREFORE  LOSS  OF  DEORBIT 
CAPABILITY  WHEN  ABOVE  RCS  REDLINES.  FIRST  FAILURE  DURING  RTLS  OR 
TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE.  LOSS  OF  AN  ENGINE  RESULTS 
IN  AN  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN 
POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG 
CONSTRAINTS . 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14;  MF0004-400  REV  C (EEE  PL) 


REPORT  DATE  02/04/87 


C-576 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


12/30/86 

OMS 

675 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  1/1 


item;  switch,  OMS  LT/RT  ENG  CONTROL  VLV 

FAILURE  MODE;  FAILS  TO  SWITCH  (STUCK  IN  OFF  POSITION) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6)  SWITCH,  OMS  LT/RT  ENG  CONTROL  VLV 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS; 

LIFTOFF;  3/2R  TAL; 

ONORBIT;  2/2  AOA; 

DEORBIT;  2/lR  ATO; 

LANDING/SAFING;  3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


HDW/FUNC 

1/1 

1/1 

3/3 

2/lR 


C [ P ] 


LOCATION;  PNL  014; 016 

PART  NUMBER;  33V73A14-S9;  33V73A16-S7 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

RESULTS  IN  AN  INABILITY  TO  OPERATE  THE  ASSOCIATED  LT/RT  BI-PROP 
BALL  VLV  RESULTING  IN  LOSS  OF  ONE  ENGINE.  ONE  FAILURE  (RT/LT 
ARM/PRESS  SWITCH  FAILURE)  AWAY  FROM  POSSIBLE  LOSS  OF  LIFE/VEHICLE 
DUE  TO  LOSS  OF  BOTH  ENGINES  AND  THEREFORE  LOSS  OF  DEORBIT 
CAPABILITY  WHEN  ABOVE  RCS  REDLINES.  FIRST  FAILURE  DURING  RTLS  OR 
TAL  IS  POSSIBLE  LOSS  OF  LIFE/VEHICLE.  LOSS  OF  AN  ENGINE  RESULTS 
IN  AN  INABILITY  TO  COMPLETE  TIME-CRITICAL  OMS  DUMP  RESULTING  IN 
POSSIBLE  VIOLATION  OF  PROP  TANK  STRUCTURAL  AND  ORBITER  ENTRY  CG 
CONSTRAINTS . 

REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  VS70- 

976102  REV  F EO  G14;  MF0004-400  REV  C (EEE  PL) 


REPORT  DATE  02/04/87 


C-577 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


12/30/86 

OMS 

676 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


switch,  OMS  LT/RT  ENG  CONTROL  VLV 
FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  ON  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  GN2  ENG  CNTRL  1/2  VLV 

6)  SWITCH,  OMS  LT/RT  ENG  CONTROL  VLV 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF;  3/3  TAL: ’ 

ONORBIT:  3/2R  AOA: 

DEORBIT;  3/3  ATO: 

LANDING/ SAFING;  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] 


B [ F ] 


C •[  P ] 


LOCATION:  PNL  014; 016 

PART  NUMBER:  33V73A14-S9;  33V73A16-S7 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

B^'  I™  NEcSs^Y^^^^^  SWITCH  STILL  AVAILABLE  TO  TERMINATE  OMS 


^SS  OF  ALL  REDUNDANCY  RESULTS  IN  INABILITY  TO  SHUT  DOWN  THE  LT 
AND  RT  OME  IN  THE  EVENT  OF  A SYSTEM  MALFUNCTION.  IF  THE  LOSS  OF 

DETECTED  DURING  ORBIT,  THE  OMS  ENGINES  SHOULD 
BE  DECLARED  FAILED  ACCEPT  ON  AN  AS  ON  NEED  OPERATIONS  BASIS  FOR 
THE  DEORBIT  BURN. 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E; 

976102  REV  F EO  G14;  MF0004-400  REV  C (EEE  PL) 


VS70- 


REPORT  DATE  02/04/87 


C-578 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  677 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM:  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR  DRIVE  MOTOR  PITCH  & YAW  (STANDBY) 

6)  CONTROLLER,  REMOTE  POWER 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/2R 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/lR 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [NA  ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 


C [ P ] 


LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  4,  PCA  1 

PART  NUMBER:  55V76A132RPC16;  54V76A131RPC28 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  SUPPLY  OF  TVC  MTR  PWR  TO 


THE  STANBY  PITCH  & YAW  MOTORS. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  AN  INABILITY 
OME,  THEREFORE  DEORBIT  CAPABILITY  IS  LOST  WHEN 
REDLINES,  LOSS  OF  VEHICLE/LIFE. 

(FOR  MANUAL  TAL  LOSS  OF  ALL  REDUNDANCY  RESULTS 
VEHICLE/LIFE)  . 


TO  CONTROL  EITHER 
ABOVE  THE  RCS 

IN  LOSS  OF 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-579 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID;  678 

ITEM;  CONTROLLER,  REMOTE 

FAILURE  MODE:  FAILS  HIGH 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 

POWER 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR  DRIVE  MOTOR  PITCH  & YAW  (STANDBY) 

6)  CONTROLLER,  REMOTE  POWER 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 

HDW/FUNC  ABORT  HDW/FUNC 

3/3  RTLS;  3/3 

3/3  TAL;  3/3 

3/3  AOA:  3/3 

3/3  ATO:  3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] B [ ] 

LOCATION;  AV  BAY  5,  PCA  2;  AV  BAY  4,  PCA  1 

PART  NUMBER;  55V76A132RPC16;  54V76A131RPC28 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

remove  power  from  standby  pitch  & YAW  ACTUATOR 

CONTROL • 

UNLESS  A FAILURE  OF  THE  STANDBY  CONTROLLER  OCCURS,  THEN 
BOTH  ACTIVE  AND  STANDBY  CONTROLLERS  COULD  BE  IN  CONFLICT  AND 
RESULT  IN  LOSS  OF  ABILITY  TO  CONTROL  OMS  ENGINE. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-580 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  679 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR  DRIVE  MOTOR  PITCH  & YAW  (STANDBY) 

6)  CONTROLLER,  REMOTE  POWER 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 
LANDING/S AFING: 

3/lR 

3/3 

ATO: 

3/lR 

REDUNDANCY  SCREENS; 

A E 2 ] 

B [NA  ] 

C [ P ] 

LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  4,  PCA  1 

PART  NUMBER:  55V76A132RPC15;  54V76A131RPC27 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  SUPPLY  OF  TVC  MTR  PWR  TO 
THE  STANBY  PITCH  & YAW  MOTORS. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  CONTROL  EITHER 
OME,  THEREFORE  DEORBIT  CAPABILITY  IS  LOST  WHEN  THE  RCD  REDLINES, 
LOSS  OF  VEHICLE/LIFE. 

(FOR  MANUAL  TAL  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF 
VEHICLE/LIFE . ) 

REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-581 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  680 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


ITEM:  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE;  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR  DRIVE  MOTOR  PITCH  & YAW  (STANDBY) 

6)  CONTROLLER,  REMOTE  POWER 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ ] 

B [ 3 

c [ ] 

LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  4,  PCA  1 

PART  NUMBER:  55V76A132RPC15;  54V76A131RPC27 


CAUSES: 


CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

remove  power  from  standby  pitch  & YAW  ACTUATOR 

CONTjROXj  • 

^ failure  of  THE  STANDBY  CONTROLLER  OCCURS,  THEN 
BOTH  ACTIVE  AND  STANDBY  CONTROLLERS  COULD  BE  IN  CONFLICT  AND 
RESULT  IN  LOSS  OF  ABILITY  TO  CONTROL  OMS  ENGINE. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-582 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM;  OMS 
MDAC  ID;  681 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


ITEM;  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR  DRIVE  MOTOR  PITCH  & YAW  (ACTIVE) 

6)  CONTROLLER,  REMOTE  POWER 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FXJNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/2R 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/lR 

ATO; 

3/lR 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [NA  ] 

C [ P ] 

LOCATION;  AV  BAY  4,  PCA  1;  AV  BAY  6,  PCA  3 

PART  NUMBER;  54V76A133RPC25;  56V76A133RPC18 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  SUPPLY  OF  TVC  MTR  PWR  TO 
THE  ACTIVE  PITCH  & YAW  MOTORS. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  CONTROL  EITHER 
OME  THEREFORE,  DEORBIT  CAPABILITY  IS  LOST  WHEN  ABOVE  RCS 
REDLINES,  LOSS  OF  VEHICLE/LIFE. 

(FOR  MANUAL  TAL  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  1/1.) 
REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-583 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

3/3 

3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR  DRIVE  MOTOR  PITCH  & YAW  (ACTIVE) 

6)  CONTROLLER,  REMOTE  POWER 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/14/87 

OMS 

682 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


CONTROLLER,  REMOTE  POWER 
FAILS  HIGH 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  6,  PCA  3 

PART  NUMBER:  54V76A133RPC25;  56V76A133RPC18 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 


& YAW  ACTUATOR 


LOSE  ABILITY  TO  REMOVE  POWER  FROM  ACTIVE  PITCH 
CONTROL. 

UNLESS  A FAILURE  OF  THE  ACTIVE  CONTROLLER  OCCURS,  THEN 
BOTH  ACTIVE  AND  STANDBY  CONTROLLERS  COULD  BE  IN  CONFLICT  AND 
RESULT  IN  LOSS  OF  ABILITY  TO  CONTROL  OMS  ENGINE. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-584 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID;  683 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/lR 

ABORT;  3/lR 


ITEM;  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR  DRIVE  MOTOR  PITCH  & YAW  (ACTIVE) 

6)  CONTROLLER,  REMOTE  POWER 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/2R 

TAL; 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/lR 

ATO; 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [NA  ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 


C [ P ] 


LOCATION;  AV  BAY  4,  PCA  1;  AV  BAY  6,  PCA  3 

PART  NUMBER;  54V76A131RPC26;  56V76A133RPC17 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  ONE  OF  TWO  ELECTRICAL  PATHS  FOR  THE  SUPPLY  OF  TVC  MTR  PWR  TO 


THE  ACTIVE  PITCH  & YAW  MOTORS. 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  CONTROL  EITHER 
OME  THEREFORE,  DEORBIT  CAPABILITY  IS  LOST  WHEN  ABOVE  RCS  RELINES, 
LOSS  OF  VEHICLE/LIFE. 

(FOR  MANUAL  TAL  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  1/1.) 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-585 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  684 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  CONTROLLER,  REMOTE  POWER 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR  DRIVE  MOTOR  PITCH  & YAW  (ACTIVE) 

6)  CONTROLLER,  REMOTE  POWER 

7) 

8) 

9) 


CRITICALITIES 

PLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ ] 

LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  6,  PCA  3 

PART  NUMBER:  54V76A131RPC26;  56V76A133RPC17 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  REMOVE  POWER  FROM  ACTIVE  PITCH  & YAW  ACTUATOR 
CONTROL. 

NO  EFFECT  UNLESS  A FAILURE  OF  THE  ACTIVE  CONTROLLER  OCCURS,  THEN 
BOTH  ACTIVE  AND  STANDBY  CONTROLLERS  COULD  BE  IN  CONFLICT  AND 
RESULT  IN  LOSS  OF  ABILITY  TO  CONTROL  OMS  ENGINE. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-586 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/14/87 

OMS 

685 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


ITEM: 

FAILURE  MODE: 
LEAD  ANALYST: 


FUSE,  3 A 
FAILS  OPEN 

V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

ELECTRICAL  COMPONENTS 

2) 

CONTROLS 

3) 

OME  SUBSYSTEM 

4) 

TVC  ASSEMBLY 

5) 

ACTUATOR  DRIVE  MOTOR  PITCH 

& YAW  (STANDBY) 

6) 

FUSE,  3A 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [NA  ] C [ P ] 


LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  4,  PCA  1 

PART  NUMBER:  55V76A132F16;  54V76A131F18 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ELECTRICAL  POWER  TO  CONTROL  CIRCUITRY  FOR  TVC  STANDBY  PITCH 
& YAW  MOTORS.  ACTIVE  TVC  FOR  OME  AVAILABLE.  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  CONTROL  EITHER  OME 
THEREFORE  DEORBIT  CAPABILITY  IS  LOST  WHEN  ABOVE  RCS  REDLINES, 

LOSS  OF  VEHICLE/LIFE.  (MANUAL  TAL  LOSS  OF  ALL  REDUNDANCY  RESULTS 
IN  1/1.) 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-587 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/14/87 

SUBSYSTEM:  OMS 

MDAC  ID:  686 


ITEM:  FUSE,  3 A 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/lR 

3/lR 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CONTROLS 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  ACTUATOR  DRIVE  MOTOR  PITCH  & YAW  (ACTIVE) 

6)  FUSE,  3A 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUl 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 
LANDING/S AFING: 

3/lR 

3/3 

ATO: 

3/lR 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [NA  ] 

C [ P ] 

LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 

PART  NUMBER:  54V76A131F17,*  56V76A133F10 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ELECTRICAL  POWER  TO  CONTROL  CIRCUITRY  FOR  THE  TVC  ACTIVE 
PITCH  & YAW  MOTORS.  STANDBY  TVC  FOR  OME  AVAILABLE.  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  CONTROL  EITHER  OME 
THEREFORE  DEORBIT  CAPABILITY  IS  LOST  WHEN  ABOVE  RCS  REDLINES, 
rXJSS  OF  VEHICLE/LIFE.  (FOR  MANUAL  TAL  LOSS  OF  ALL  REDUNDANCY 
RESULTS  IN  1/1.) 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-588 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

687 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  SENSOR  PRESSURE,  OMS  ENGINE  PNEUMATIC  PRESSURE 

FAILURE  MODE:  ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  SENSOR  PRESSURE,  OMS  ENGINE  PNEUMATIC  PRESSURE  NO.l 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  OME 

PART  NUMBER:  51V43PT004,  52V43PT004 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  UTILIZE  PT004  FOR  GN2  TK  PRESSURE  MEASUREMENT.  A 
REDUNDANT  LT/RT  PRESSURE  MEASUREMENT  IS  AVAILABLE  UTILIZING  PT005 
MEASUREMENT  V43P4548C1/V43P5548C.  IF  ALL  REDUNDANCY  IS  LOST 
(FAILS  LOW  INDICATING  LOSS  OF  GN2)  THE  REAL  STATUS  OF  THE  OME  N2 
TK  WILL  BE  UNAVAILABLE  OR  FALSELY  INDICATED  (LOSS  OF  N2)  AND  CAN 
RESULT  IN  FALSELY  FAILING  2 OMS  GN2  TKS  LEAKING/FAILED,  THEREFORE 
MISSION  CAPABILITIES  LOST  OR  ATO  COULD  BE  CALLED  (REF 
FLIGHT  RULE  6-40). 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-589 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

688 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


SENSOR  PRESSURE,  OMS  ENGINE  PNEUMATIC  PRESSURE 

NO.  2 

FAILURE  MODE:  ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  SENSOR  PRESSURE,  OMS  ENGINE  PNEUMATIC  PRESSURE  NO. 2 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/ SAFING; 

HDW/FUNC 

3/3 

3/2R 

3/2R 

3/3 

3/3 

ABORT 

RTLS; 

TAL; 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  OME 

PART  NUMBER;  51V43PT005,  52V43PT005 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSE  ABILITY  TO  UTILIZE  PT005  FOR  GN2  TK  PRESSURE  MEASUREMENT.  A 
REDUNDANT  LT/RT  PRESSURE  MEASUREMENT  IS  AVAILABLE  UTILIZING  PT004 
MEASUREMENT  43VP4547C/43VP5547C.  IF  ALL  REDUNDANCY  IS  LOSE 
(FAILS  LOW  INDICATING  LOSS  OF  GN2)  THE  REAL  STATUS  OF  THE  OME  N2 
TK  WILL  BE  UNAVAILABLE  OR  FALSELY  INDICATED  (LOSS  OF  N2)  AND  CAN 
RESULT  IN  FALSELY  FAILING  2 OMS  GN2  TKS  LEAKING/FAILED? 

THEREFORE,  MISSION  CAPABILITIES  LOST  OR  ATO  COULD  BE  CALLED 
(REF  FLIGHT  RULE  6-40). 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-590 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

689 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  1/1 


ITEM:  SENSOR  PRESSURE,  OMS  ENGINE  REG  OUT 

FAILURE  MODE:  ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY : 

1)  ELECTRICAL  COMPONENTS 

2 ) INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  GN2  ASSEMBLY 

5)  SENSOR  PRESSURE,  OMS  ENGINE  REG  OUT 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

1/1 

LIFTOFF: 

2/2 

TAL: 

1/1 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B C P ] 

C [ P ] 

LOCATION:  OME 

PART  NUMBER:  51V43PT006,  52V43PT006 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE:  

^ failure  OF  PT0  06  COULD  LEAD  TO  FALSELY  FAILING  ONE  OMS  ENGINE 
(SEE  FLIGHT  RULE  6-4,  LINE  FAILURE).  FOR  LO  & 00  LOSS  OF  AN  OMS 
ENGINE  WOULD  RESULT  IN  LIMITING  ATTITUDE  TO  RCS  DEORBIT 
CAPABILITIES.  LOSS  OF  REDUNDANCY  IN  THE  DO  PHASE  COULD  LEAD  TO 
FAILURE  OF  TWO  OMS  ENGINES  AND  THEREFORE  LOSS  OF  DEORBIT 
CAPABILITY  IF  ABOVE  THE  RCS  REDLINE.  LOSS  OF  ONE  OMS  ENGINE 
DURING  RTLS  & TAL  WOULD  RESULT  IN  INABILITY  TO  PERFORM  TIME 
CRITICAL  PROPELLANT  DUMP. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-20923  PCN-1 


REPORT  DATE  02/04/87 


C-591 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/06/87 

SUBSYSTEM:  OMS 

MDAC  ID:  690 


ITEM:  FUSE,  3 A 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BI-PROP  2 VLVS 

6)  FUSE,  3A 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 3 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 

PART  NUMBER:  55V76A132F20;  56V76A133F11 


contamination,  vibration,  mechanical  shock,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

INDICATION  FOR  (LT/RT)  BI-PROP  VALVE  2.  LOSS  OF 
results  in  loss  of  position  INDICATION  FOR  ALL  BI- 
limitation  will  RESULT  FROM  THE  FAILURE 
SINCE  BI-PROP  PERFORMANCE  AND  HEALTH  CAN  BE  INDIRECTLY 
DETERMINED  FROM  ENGINE  PERFORMANCE  PARAMETERS. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-592 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/06/87 

SUBSYSTEM;  OMS 
MDAC  ID;  691 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM;  FUSE,  3 A 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  BI-PROP  1 VLVS 

6)  FUSE,  3A 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B C ] 

c [ ] 

LOCATION;  AV  BAY  4,  PCA  1 

PART  NUMBER;  54V76A131F13 ; F14 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE; 

LOSE  POSITION  INDICATION  FOR  (LT/RT)  BI-PROP  VALVE  1.  LOSS  OF 
ALL  REDUNDANY  RESULTS  IN  LOSS  OF  POSITION  INDICATION  FOR  ALL  BI- 
PROP VALVES  LT  & RT.  NO  LIMITATION  WILL  RESULT  FROM  THE  FAILURE 
SINCE  BI-PROP  PERFORMANCE  AND  HEALTH  CAN  BE  INDIRECTLY 
DETERMINED  FROM  ENGINE  PERFORMANCE  PARAMETERS. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-593 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

692 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  METER,  RT/LT  OME  PRESSURE  PC 

FAILURE  MODE:  ERRONEOUS  OUTPUT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  METER,  RT/LT  OME  PRESSURE  PC 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  PNL  F7A5  M2 

PART  NUMBER:  34V73A7A5-M1 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

INDICATION  OF  PC.  ENGINE  HEALTH  CAN  STILL  BE 
MONITORED  UTILIZING  BALL  VALVE  POSITON,  DELTA  V AND  ENGINE 
TEMPERATURE.  ~ 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-594 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

693 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  SENSOR  POSITION,  BI -PROPELLANT  VALVE  1 

FAILURE  MODE:  ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

ELECTRICAL  COMPONENTS 

2) 

INSTRUMENTATION 

3) 

OME  SUBSYSTEM 

4) 

OME  ASSEMBLY 

5) 

SENSOR  POSITION, 

BI -PROPELLANT 

1 VALVES 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING 

: 3/3 

REDUNDANCY  SCREENS; 

A [ 2 3 

B [ P ] 

C [ P ] 

LOCATION:  OME 

PART  NUMBER;  51V43LV1,  52V43LV1 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE: 

FALSE  INDICATION  OF  VALVE  POSITION  COULD  LEAD  TO  LIMITING  OMS 
ENGINE  USE.  THE  ENGINE  WILL  BE  USED  ONLY  IF  THE  OTHER  ENGINE  HAS 
FAILED  AND  THEN  ONLY  FOR  THE  DEORBIT  BURN  (REF  FLIGHT  RULE  6-26). 
LOSS  OF  ALL  REDUNDANCY  DURING  LO  OR  00  PHASE  WOULD  LEAD  TO 
FAILURE  TO  REACH  DESIRED  ALTITUDE,  (LIMIT  ATTITUDE  TO  RCS 
REDLINES  TO  ENSURE  DEORBIT  CAPABILITY). 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  JSC 

20923  PCN-1 


REPORT  DATE  02/04/87 


C-595 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

694 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


SENSOR  POSITION,  BI-PROPELLANT  VALVE  2 
ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  SENSOR  POSITION,  BI-PROPELLANT  2 VALVES 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/S AFING ; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  OME 

PART  NUMBER;  51V43LV2,  52V43LV2 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FALSE  INDICATION  OF  VALVE  POSITION  COULD  LEAD  TO  LIMITING  OMS 

USE.  THE  ENGINE  WILL  BE  USED  ONLY  IF  THE  OTHER  ENGINE  HAS 

the  deorbit  BURN  (REF  FLIGHT  RUI^  6-2^ 
redundancy  during  LO  or  00  PHASE  WOULD  LEAD  TO 
FAILURE  TO  REACH  DESIRED  ALTITUDE,  (LIMIT  ATTITUDE  TO  RCS 
REDLINES  TO  ENSURE  DEORBIT  CAPABILITY).  TO  RCS 


REFERENCES: 
20923  PCN-1 


VS70-943099  REV  A EO  B12;  MC621-0059  REV  E;  JSC 


REPORT  DATE  02/04/87 


C-596 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

695 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE; 
TOLERANCE) 

LEAD  ANALYST; 


SENSOR  PRESSURE,  OMS  ENGINE  CHAMBER 
ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS 


OUT  OF 


V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  SENSOR  PRESSURE,  OMS  ENGINE  CHAMBER 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/ SAFING ; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL; 

AOA: 

ATO: 


REDUNDANCY  SCREENS;  A [ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  OME 

PART  NUMBER:  51V43PT003,  52V43PT003 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


^|“|^“™AtroEMENT  HIGH  WILL  BE  CAUSE 

THE  AFFECTED  ENGINE  FOR  NONCRITICAL  OMS  BURNS  IF  THE  ^T'HER  OMS 
ENGINE  IS  STILL  AVAILABLE  (REF  FLIGHT  RULE  6-27).  WITH  THE  LOSS 
OF  PC  THE  CREW  WOULD  BE  UNABLE  TO  DISCERN  INSTRUMENTATION  FROM  A 
REAL  PERFORMANCE  PROBLEM  DURING  AN  OMS  BURN. 


REFERENCES 


; VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-597 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

696 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


SENSOR  PRESSURE,  OMS  ENGINE  FU  INLET  PRESS 
ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  SENSOR  PRESSURE,  OMS  ENGINE  FU  INLET  PRESS 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B 

LOCATION:  OME 

PART  NUMBER:  51V43PT001,  52V43PT001 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

^SE  ABILITY  TO  UTILIZE  PTOOl  FOR  FUEL  INLET  PRESSURE 
MEASUREMENT.  THE  MEASUREMENT  IS  USED  FOR  LEAK  ISOLATION  AND  ^TN 

injector  jiMP  va“ve  pos^tio™ 

INDICATOR)  FOR  ISOLATION  OF  OX  FLOW  RESTRICTION. 

OF  THE  SENSOR  SEVERELY  DEGRADES  CREW  MONITORING 
^PABILITY.  DECREASED  CAPABILITY  TO  DETERMINE  FLOW  RATE  AND 
DISCERN  BETWEEN  ENGINE  AND  PROPELLANT  FAILURES. 

^COMMEND  THIS  PRESSURE  MEASUREMENT  BE  INCLUDED  IN  FLIGHT  RULE  6- 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-598 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


11/23/86 

OMS 

697 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM; 

FAILURE  MODE; 
TOLERANCE) 


SENSOR  PRESSURE,  OMS  ENGINE  OX  INLET  PRESS 
ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  SENSOR  PRESSURE,  OMS  ENGINE  OX  INLET  PRESS 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c C ] 

LOCATION;  OME 

PART  NUMBER;  51V43PT002,  52V43PT002 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS /RATIONALE ; 

LOSE  ABILITY  TO  UTILIZE  PT002  FOR  OX  INLET  PRESSURE  MEASUREMENT. 
THE  MEASUREMENT  IS  USED  FOR  LEAK  ISOLATION  AND  (INCONJUNCTION 
WITH  PC,  FUEL  INJECTOR  TEMP  AND  BALL  VALVE  POSITION  INDICATOR) 

FOR  ISOLATION  OF  OX  FLOW  RESTRICTION.  FAILURE  OF  THE  SENSOR 
SEVERELY  DEGRADES  CREW  MONITORING  CAPABILITY.  DECREASED 
CAPABILITY  TO  DETERMINE  FLOW  RATE  AND  DISCERN  BETWEEN  ENGINE  AND 

PROPELLANT  FAILURES.  /r 

RECOMMEND  THIS  PRESSURE  MEASUREMENT  BE  INCLUDED  IN  FLIGHT  RULE  6- 

27. 


REFERENCES;  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-599 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

698 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  1/1 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


SENSOR  TEMPERATURE  ENGINE  FUEL  FEED  LINE 
ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS -OUT-OF- 


LEAD ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

breakdown  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  SENSOR  TEMPERATURE,  ENGINE  FUEL  FEED  LINE 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/Fxmc 

ABORT 

3/3 

RTLS 

2/2 

TAL: 

2/lR 

AOA: 

3/lR 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


LOCATION:  OME 

PART  NUMBER:  51V43TT002,  52V43TT002 


HDW/FUNC 

1/1 

1/1 

3/2R 

2/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

SENSOR,  A FALSE  TEMP  INDICATION  OF  EITHER 
^ ASSOCIATED  ENGINE  WOULD  BE  DECLARED  FAILED 
20923  PCN-1,  RULE  6-3)  RESULTING  IN  LOSS  OF  FULL  MISSION 
IMPOSED  PROP  MGR  TECHS  TO  ENSURE  DEORBIT 
^PABILITIES.  FAILURE  OF  ALL  REDUNDANCY  COULD  LEAD  TO 
INCORRECTLY  FAILING  TWO  OMS  ENGINES  AND  IF  THIS  DECISION  IS  NOT 

deorbit  capability  WOULD  RESULT  THUS 
RTLS  & OMS  BOTH  ENGINES  ARE  NEEDED  TO 
ESTABLISH  WEIGHT  & CG  FOR  ACCEPTABLE  LANDING. 

ALLOWED  DURING  ABORTS  ALL  DECISIONS  ARE  TIME 

CRX  X X CAXj  • 


REFERENCES: 

840CT1 


VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1;  JSC-18958 


REPORT  DATE  02/04/87 


C-600 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

699 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


ITEM:  SENSOR  TEMPERATURE,  ENGINE  FUEL  INJECTOR 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  SENSOR  TEMPERATURE,  ENGINE  FUEL  INJECTOR 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] B 


C [ ] 


LOCATION;  OME 

PART  NUMBER:  51V43TT001,  52V43TT001 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE;  

LOSS  OF  FUEL  INJECTOR  TEMPERATURE  FAIL  HIGH/LOW  WILL  BE  CAUSE  TO 
NO-GO  FURTHER  USE  OF  THE  AFFECTED  ENGINE  FOR  NONCRITICAL  OMS 
BURNS  IF  THE  OTHER  OME  IS  STILL  AVAILABLE  (REF  FLIGHT  RULE  6-27). 
FAILURE  OF  THE  SENSOR  SEVERELY  DEGRADES  CREW  MONITORING 
CAPABILITY.  AN  ENGINE  FAILURE  COULD  NOT  BE  DISTINGUISHED  FROM  A 
PROPELLANT  FAILURE  IF  IT  OCCURS  DURING  AN  OMS  BURN  WITH  THE 
AFFECTED  ENGINE.  THE  ENGINE  AND  ASSOCIATED  PROPELLANT  SYSTEMS 
WOULD  BE  SUSPECT  AND  COULD  NOT  BE  USED  WITHOUT  POSSIBLE  DAMAGE  TO 
GOOD  ENGINE  OR  OMS  POD. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18958  840CT1;  JSC 

20923  PCN-1 


REPORT  DATE  02/04/87 


C-601 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

700 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  SENSOR  TEMPERATURE,  ENGINE  OX  VALVE 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  SENSOR  TEMPERATURE,  ENGINE  OX  VALVE 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  OME 

PART  NUMBER:  51V43TT003,  52V43TT003 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IMPACT.  SENSOR  PROVIDES  A NONCRITICAL  MEASUREMENT. 
FAILURE  CAN  BE  DETERMINED  BY  INSPECTING  OX  FEED  LN  TEMP 
V43T4216A/V43T5216A  AND  ENGINE  FU  INJECTOR  TEMP 
V43T4643A/V43T5643A  SENSORS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  20923  PCN-1 


c 


8 


REPORT  DATE  02/04/87 


C-602 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

701 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


SENSOR  TEMPERATURE,  OX  ENG  INLET 

ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  OME  ASSEMBLY 

5)  SENSOR  TEMPERATURE,  OX  ENG  INLET 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS:  A 

[ ] B 

[ ] 

c [ ] 

LOCATION;  OME 

PART  NUMBER;  51V43TT407,  52V43TT507 

CAUSES:  CONTAMINATION, 

VIBRATION,  PIECE  PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE: 

NONE,  LOSE  DIRECT  TEMP  MEASUREMENT  OF  OX  ENG  INLET  LN  AND  AN 
INDIRECT  INDICATION  OF  THE  OME  COVER  HTR  SYSTEM.  VALIDITY  OF 
MEASUREMENT  CAN  BE  DETERMINED  FROM  LN  PRESS,  OME  COVER  TEMP  AND 
FUEL  FEED  LINE  TEMP  MEASUREMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E (ZONE  76 

C);  JSC  20923  PCN-l;  JSC  18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-603 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/23/86 

SUBSYSTEM:  OMS 

MDAC  ID:  702 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


SENSOR  POSITION,  ACTIVE  PITCH  ACTUATOR 
ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  SENSOR  POSITION,  ACTIVE  PITCH  ACTUATOR 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS: 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 


REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  OME 

PART  NUMBER:  51V43  ,52V43 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  POSITION  SENSOR  RESULTS  IN  LOSS  OF  ONE  OF  TWO  REDUNDANT 

all  rSduSdaS??  REsS^?f L 

INABILITY  TO  CONTROL  EITHER  OHE  THEREFORE,  DEORBIT  CAPABILITY  IS 
LOST  WHEN  ABOVE  RCS  REDLINES  (FLIGHT  & ATO).  CAPABILITY  IS 


REFERENCES:  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-604 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

703 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM:  SENSOR  POSITION,  ACTIVE  YAW  ACTUATOR 

FAILURE  MODE:  ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  SENSOR  POSITION,  ACTIVE  YAW  ACTUATOR 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/2R 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/lR 

ATO: 

3/lR 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  OME 

PART  NUMBER:  51V43  ,52V43 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE: 

LOSS  OF  POSITION  SENSOR  RESULTS  IN  LOSS  OF  ONE  OF  TWO  REDUNDANT 
CONTROL  CIRCUITS  FOR  OME  TVC.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
INABILITY  TO  CONTROL  EITHER  OME  THEREFORE,  DEORBIT  CAPABILITY  IS 
LOST  WHEN  ABOVE  RCS  REDLINES  (FLIGHT  & ATO) . 


REFERENCES: 


VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-605 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

704 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


SENSOR  POSITION,  STANDBY  PITCH  ACTUATOR 
ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  SENSOR  POSITION,  STANDBY  PITCH  ACTUATOR 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/2R 

TAL: 

3/2R 

AOA: 

3/lR 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


LOCATION:  OME 

PART  NUMBER:  51V43  ,52V43 


HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

JSfxLSf  ^SITION  SENSOR  RESULTS  IN  LOSS  OF  ONE  OF  TWO  REDUNDANT 
CONTROL  CIRCUITS  FOR  OME  TVC.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 

INABILITY  TO  CONTROL  EITHER  OME  THEREFORE,  DEORBIT  CAPABILITY  IS 
LOST  WHEN  ABOVE  RCS  REDLINES  (FLIGHT  & ATO).  CAPABILITY  IS 


REFERENCES;  VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-606 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/23/86 

OMS 

705 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/lR 

ABORT:  3/lR 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


SENSOR  POSITION,  STANDBY  YAW  ACTUATOR 
ERRONEOUS  OUTPUT  ( OPEN,  SHORTED,  FAILS  OUT  OF 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  INSTRUMENTATION 

3)  OME  SUBSYSTEM 

4)  TVC  ASSEMBLY 

5)  SENSOR  POSITION,  STANDBY  YAW  ACTUATOR 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/2R 

3/2R 

3/lR 

3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/lR 


C [ P ] 


LOCATION:  OME 

PART  NUMBER:  51V43  ,52V43 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


effects /rationale • 

LOSS  OF  POSITION  SENSOR  RESULTS  IN  LOSS  OF  ONE  OF  TWO  REDUNDANT 
CONTROL  CIRCUITS  FOR  OME  TVC.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
INABILITY  TO  CONTROL  EITHER  OME  THEREFORE,  DEORBIT  CAPABILITY  IS 
LOST  WHEN  ABOVE  RCS  REDLINES  (FLIGHT  & ATO). 


REFERENCES: 


VS70-943099  REV  A EO  B12;  MC621-0059  REV  E 


REPORT  DATE  02/04/87 


C-607 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  706 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


CRITICALITIES 
HDW/FUNC  ABORT 

3/3  RTLS: 

3/3  TAL: 

2/lR  AOA: 

3/3  ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

TYPE  III^O^’  54V76A121AR  Jll-S*  TYPE  III  O;  55V76A122AR  Jll-FF 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBTF 
,y^“^CLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
Jwwn  =1?^  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 

I ^ ^ have  a max  temp  OF  615 

F UNDER  SAME  CONDITIONS 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT*82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-608 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


1/16/87 

OMS 

707 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  U 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  1 


SUBSYS  LEAD;  D.J.  PAUL 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ 2 ] 


ABORT 

RTLS; 

TAL; 

AOA; 

ATO; 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION;  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER;  54V76A121AR  Jll-S'  TYPE  III  O;  55V76A122AR  Jll-FF 
TYPE  III  O 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS /RATIONAIjE  l 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 

OF  S"seven\eel”w^  drivers  there  are  three  which  a 

FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-609 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  708 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


CRITICALITIES 
HDW/FUNC  ABORT 

3/3  RTLS: 

3/3  TAL: 

2/lR  AOA: 

3/3  ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

^CATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

TYPE  III^O^'  54V76A121AR  Jll-CC  TYPE  III  O;  55V76A122AR  Jll-KK 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
^ICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON”  SIMULTANEOUSLY  WHEN  THE 

resulting  iH 

EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE 
iS??.  VEHICLE/LIFE  due  to  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN^ 
C WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 


REPORT  DATE  02/04/87 


C-610 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  709 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


item:  driver,  hybrid 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS: 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION: 
PART  NUMBER: 
TYPE  III  O 


AV  BAY  4,  LCA  1;  AV  BAY 
54V76A121AR  Jll-CC  TYPE 


5,  LCA  2 

III  0;  55V76A122AR  Jll-KK 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE:  

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 

ON  NEXT  DAILY  GO/NO-GO.  „„-r«rT  , 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE’85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-611 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  710 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 

3/3  RTLS: 

3/3  TAL: 

2/lR  AOA: 

3/3  ATO: 

3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

T^E  I??®0^'  54V76A121AR  Jll-D*  TYPE  III  O;  55V76A122AR  Jll-F 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
E^MENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDDNDAMT  HTH  GROUP  IS  ACTIVE  RESULTING  IH  A TraPESml 

S™°=TOAL  aUALIFliS  limit  POSSIBLE 

THAT  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 

TEMP  OF  552  F iMn  . ®°™  =““ENTS  ON  WILL  HAVE  A MAX 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82  LTR 

28  JUNE'85;  JSC  20923  PCN-1,  73A760210  ^V  A ' 


REPORT  DATE  02/04/87 


C-612 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/16/87 

OMS 

711 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
DRIVER,  HYBRID,  LT/RT  KEEL 


WEB  GROUP 


1 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT;  3/2R  AOA; 

DEORBIT:  3/3  ATO; 

LANDING/ SAFING:  3/3 

REDUNDANCE  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION: 
PART  NUMBER; 
TYPE  III  O 


AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

54V76A121AR  Jll-D'  TYPE  III  O;  55V76A122AR  Jll-F 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 


ON  NEXT  DAILY  GO/NO-GO.  r^-r^TT  ^ 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-613 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  712 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


CRITICALITIES 
HDW/FUNC  ABORT 

3/3  RTLS: 

3/3  TAL: 

2/lR  AOA: 

3/3  ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

TYPE  III^O^'  54V76A121AR  Jll-FF  TYPE  III  O;  55V76A122AR  Jll-NN 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

failure  results  in  the  associated  HTR  set  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 

HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE 
VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
nr?  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE*85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-614 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

713 


item:  driver,  hybrid 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


breakdown  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] 


ABORT 

RTLS! 

TAL: 

AOA: 

ATO: 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

54V76A121AR  Jll-FF  TYPE  III  O;  55V76A122AR  Jll-NN 


LOCATION: 

PART  NUMBER: 

TYPE  III  O 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE:  „,-r>Tm,vTrT 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 

ON  NEXT  DAILY  GO/NO-GO.  , 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12?  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-615 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  714 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 

3/3  RTLS; 

3/3  TAL: 

2/lR  AOA: 

3/3  ATO: 


REDUNDANCY  SCREENS;  A [ 2 ] 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

T^E  III^O^*’  ^^^■^®^^21AR  Jll-U'  TYPE  III  O;  55V76A122AR  Jll-DD 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
^ICH  COULD  RESULT  IN  A HIGHER  TH2Uf  DESIRED  TEMP  IN  POD  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 

HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 

group  is  active  resulting  in  a temperature 

pCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE 
is??.  VEHICLE/LIFE  due  to  structural  damage.  tests  have  SHOWN 

ELEMENTS  ON  WILL  HAVE  A MAX 


REPORT  DATE  02/04/87 


C-616 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  715 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  2/lR  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C t P ] 


LOCATION: 
PART  NUMBER: 
TYPE  III  O 


AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

54V76A121AR  Jll-V  TYPE  III  0;  55V76A122AR  Jll-EE 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS /RATIONAIjE  • 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSI^E 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F tJNDER  SAME  CONDITIONS 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-617 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  716 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/ SAFING : 


HDW/FUNC 
3/3 
3/3 
3/2R 
3/3 
3/3 


CRITICALITIES 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


C [ P ] 


LOCATION: 
PART  NUMBER: 
TYPE  III  O 


AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

54V76A121AR  Jll-U'  TYPE  III  O;  55V76A122AR  Jll-DD 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
oS  BE  CAUSE  FOR  EHIRY 

WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITIOnT)  FAILURE 


REFERENCES: 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT*8: 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-618 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  717 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


item:  driver,  hybrid 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION: 
PART  NUMBER: 
TYPE  III  O 


AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

54V76A121AR  Jll-V*  TYPE  III  O;  55V76A122AR  Jll-EE 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 

ON  NEXT  DAILY  GO/NO-GO.  ^ , 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE*85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-619 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  718 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 

3/3  RTLS: 

3/3  TAL: 

2/lR  AOA: 

3/3  ATO: 

3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

54V76A121AR  Jll-T*  TYPE  III  O;  55V76A122AR  Jll-GG 

TxP£  XXX  0 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

j^RST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR’S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE 
^SS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-620 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID;  719 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


item;  driver,  hybrid 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
POD 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


THERMAL 

DRIVER, 


CONTROL 

HYBRID, 


SUBSYSTEM 
LT/RT  KEEL 


WEB  GROUP  1 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS; 

LIFTOFF;  3/3  TAL; 

ONORBIT;  3/2R  AOA; 

DEORBIT;  3/3  ATO; 

LANDING/SAFING;  3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION; 
PART  NUMBER: 
TYPE  III  O 


AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

54V76A121AR  Jll-T'  TYPE  III  O;  55V76A122AR  Jll-GG 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 

ON  NEXT  DAILY  GO/NO-GO.  , 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-621 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID;  720 

ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

breakdown  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT:  3/3 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 

HDW/FUNC 

3/3 

3/3 

2/lR 

3/3 

3/3 

ABORT 

RTLS; 

TAL; 

AOA: 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A C 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

P^T  NUMBER:  55V76A122AR  Jll-S'  TYPE  III;  54V76A123AR  Jll-S* 

(145)  TYPE  III 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE; 

^]^T  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8”  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
pMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS 


REFERENCES ; 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT*82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-622 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  721 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122AR  Jll-S’  TYPE  III;  54V76A123AR  Jll-S 

(145)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 

ON  NEXT  DAILY  GO/NO-GO.  , 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE*85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-623 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID;  722 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

2/lR 

3/3 

3/3 


ABORT 

RTLS; 

TAL; 

AOA: 

ATO; 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ 2 ] 


C [ P ] 


LOCATION; 
PART  NUMBER; 
KK  TYPE  III 


AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

56V76A123AR  Jll-KK  (151)  TYPE  III;  54V76A121AR  Jll- 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 

"ON"  SIMULTANEOUSLY  WHEN  THE 
ACTIVE  RESULTING  IN  A TEMPERATURE 
STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE 
VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 

^ ^ “AVE  a max  temp  OF  615 

F UNDER  SAME  CONDITIONS 


REFERENCES; 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-624 


DATE: 

SUBSYSTEM: 
HDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/16/87 

OMS 

723 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL 

5) 

6) 

7) 

8) 

9) 


WEB  GROUP 


2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION: 
PART  NUMBER; 
KK  TYPE  III 


AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

56V76A123AR  Jll-KK  (151)  TYPE  III;  54V76A121AR  Jll- 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ATT.  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 

ON  NEXT  DAILY  GO/NO-GO.  

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-625 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  724 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH : 3/3  RTLS  * 

LIFTOFF:  3/3  TAL: * 

ONORBIT:  2/lR  AOA: 

DEORBIT:  3/3  ATO* 

LANDING/SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

irJSw  56V76A123AR  J6-JJ  (150)  TYPE  III;  54V76A121AR  Jll-H 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
E^MENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLF 
iS??.  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE^SHOW 

ELEMENTS  ON  WILL  HAVE  A MAX 

^ ^ ^ HTR  WILL  HAVE  A MAX  TEMP  OF  615 

F UNDER  SAME  CONDITIONS 


REFERENCES: 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-626 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  725 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL 

5) 

6) 

7) 

8) 

9) 


WEB  GROUP  2 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ S AFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

PART  NUMBER:  56V76A123AR  J6-JJ  (150)  TYPE  III;  54V76A121AR  Jll-H 

TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 

ON  NEXT  DAILY  GO/NO-GO.  

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE*85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-627 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

726 


ITEM: 

FAILURE  MODE: 


DRIVER,  HYBRID 
FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, LCA  3;  AV 

BAY 

4,  LCA  1 

PART  NUMBER:  56V76A123AR  Jll-NN 

NN  TYPE  III 

(155) 

TYPE  III; 

54V76A121AR 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-628 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

727 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


REDUNDANCY  SCREENS: 

LOCATION:  AV  BAY 
PART  NUMBER:  56V76A 
NN  TYPE  III 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 
: 3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

6,  LCA  3;  AV 

BAY  4,  LCA  1 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT*82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-629 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID:  728 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2 ) POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: * 

ONORBIT;  2/lR  AOA: 

DEORBIT;  3/3  ATO; 

LANDING/SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER;  55V76A122AR  Jll-V  TYPE  III;  54V76A123AR  Jll-V 
(142)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  ”ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-630 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/2R 

MDAC  ID:  729  ABORT:  3/3 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122AR  Jll-V  TYPE  III;  54V76A123AR  Jll-V 

(142)  TYPE  III 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-631 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  730 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

3/3 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  2/lR  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122AR  Jll-U'  TYPE  III;  54V76A123AR  Jll-U' 

(143)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE 
IX:}SS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-632 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  731 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122AR  Jll-U'  TYPE  III;  54V76A123AR  Jll-U' 

(143)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-633 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 
2/lR 
3/3 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

732 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122AR  Jll-T*  TYPE  III;  54V76A123AR  Jll-T' 

(144)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-634 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID:  733 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AOA; 

DEORBIT;  3/3  ATO: 

LANDING/SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122AR  Jll-T'  TYPE  III;  54V76A121AR  Jll-T' 

(144)  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
ON^NEJ^^^EAII^^  desired  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 

WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES: 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-635 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  734 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
LEAD  ANALYST: 


DRIVER,  HYBRID 
FAILS  HIGH 

V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS  HOUSING  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  2/lR  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER:  54V76A121AR  J6-AA  TYPE  III  O;  55V76A122AR  J6-U' 

TYPE  III  O 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE: 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  THE  HTR  ''ON”  SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR 
GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE  EXCEEDING  THE  POD 
STRUCTURAL  QUALIFIED  LIMIT  OF  425  DEG  F AND  POSSIBLE  LOSS  OF 
VEHICLE  DUE  TO  STRUCTURAL  DAMAGES.  TESTS  HAVE  SHOWN  THAT  A 4” 

BY  8”  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX  TEMP  OF  55  2 
DEG  F AN  A 1”  BY  7”  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615  DEG  F 
UNDER  SAME  CONDITIONS.  AND  BOTH  TYPES  WILL  EXCEED  THE  QUALIFIED 
TEMP  OF  42  5 DEG  F IN  APPROXIMATELY  2 MIN. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-636 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID;  735 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
LEAD  ANALYST: 


DRIVER,  HYBRID 
FAILS  OPEN 

V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS 

5) 

6) 

7) 

8) 

9) 


HOUSING  GROUP 


1 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER:  54V76A121AR  J6-AA  TYPE  III  0;  55V76A122AR  J6-U' 

TYPE  III  0 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT’82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-637 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

736 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


DRIVER,  HYBRID 
FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 

DRIVER,  HYBRID,  LT/RT  RCS  HOUSING  GROUP  1 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  2/lR  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER:  54V76A121AR  Jll-EE  TYPE  III  O;  55V76A122AR  Jll-MM 

TYPE  III  0 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  THE  HTR  "ON"  SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR 
GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE  EXCEEDING  THE  POD 
STRUCTURAL  QUALIFIED  LIMIT  OF  425  DEG  F AND  POSSIBLE  LOSS  OF 
VEHICLE  LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN  THAT  A 
4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX  TEMP  OF 
552  DEG  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615  DEG 
F UNDER  SAME  CONDITIONS.  AND  BOTH  TYPES  WILL  EXCEED  THE 
QUALIFIED  TEMP  OF  42  5 DEG  F IN  APPROXIMATELY  2 MIN. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-638 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  737 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS 

5) 

6) 

7) 

8) 

9) 


HOUSING  GROUP  1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 3 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER:  54V76A121AR  Jll-EE  TYPE  III  O;  55V76A122AR  Jll-MM 

TYPE  III  O 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-639 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

738 


ITEM: 

FAILURE  MODE: 


DRIVER,  HYBRID 
FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
DRIVER,  HYBRID,  LT/RT  RCS  HOUSING  GROUP  1 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  2/lR  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING;  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER:  54V76A121AR  Jll-C  TYPE  III  0;  55V76A122AR  Jll-G 

TYPE  III  O 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  HTR  GROUP  WOULD  RESULT  IN  BOTH  ELEMENTS  OF 
THE  HTR  "ON"  SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR  GROUP  IS 
ACTIVE  RESULTING  IN  A TEMPERATURE  EXCEEDING  THE  POD  STRUCTURAL 
QUALIFIED  LIMIT  OF  42  5 DEG  F AND  POSSIBLE  LOSS  OF  VEHICLE  LIFE 
DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN  THAT  A 4"  BY  8"  47W 
HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX  TEMP  OF  552  DEG  F AND  A 
I"  BY  7"  low  HTR  WILL  HAVE  A MAX  TEMP  OF  615  DEG  F UNDER  SAME 
CONDITIONS.  AND  BOTH  TYPES  WILL  EXCEED  THE  QUALIFIED  TEMP  OF  425 
DEG  F IN  APPROXIMATELY  2 MIN. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-640 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  739 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS 

5) 

6) 

7) 

8) 

9) 


HOUSING  GROUP 


1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER:  54V76A121AR  Jll-C  TYPE  III  O;  55V76A122AR  Jll-G 

TYPE  III  O 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-641 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

740 


ITEM: 

FAILURE  MODE: 


DRIVER,  HYBRID 
FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
DRIVER,  HYBRID,  LT/RT  RCS  HOUSING  GROUP  1 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH : 3/3  RTLS : 

LIFTOFF:  3/3  TAL: ’ 

ONORBIT:  2/lR  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING;  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER:  54V76A121AR  Jll-BB  TYPE  III  O;  55V76A122AR  Jll-JJ 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERTURE  EXCEEDING 
THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE  LOSS  OF 
VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN  THAT  A 
4"  BY  8'  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX  TEMP  OF 
552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615  F UNDER 
SAME  CONDITIONS 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-642 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  741 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


THERMAL 

DRIVER, 


CONTROL 

HYBRID, 


SUBSYSTEM 
LT/RT  RCS 


HOUSING  GROUP 


1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER:  54V76A121AR  Jll-BB  TYPE  III  O;  55V76A122AR  Jll-JJ 
TYPE  III  O 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-643 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/16/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

2/lR 

MDAC  ID: 

742 

ABORT: 

3/3 

ITEM: 

DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS  HOUSING  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, LCA  3;  AV 

BAY 

4,  LCA  1 

PART  NUMBER;  56V76A123AR  J6-Y  (153)  TYPE  III;  54V76A121AR  J6-I 
TYPE  III 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON” 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  THE  HTR  "ON''  SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR 
GROUP  IS  ACTIVE  RESULTING  INA  TEMPERATURE  EXCEEDING  THE  POD 
STRUCTURAL  QUALIFIED  LIMIT  OF  425  DEG  F AND  POSSIBLE  LOSS  OF 
VEHICLE  DUE  TO  STRUCTURAL  DAMAGES.  TESTS  HAVE  SHOWN  THAT  A 4”  BY 
8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX  TEMP  OF  552  DEG 
F AN  A 1”  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615  DEG  F UNDER 
SAME  CONDITIONS.  AND  BOTH  TYPES  WILL  EXCEED  THE  QUALIFIED  TEMP 
OF  425  DEG  F IN  APPROXIMATELY  2 MIN. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-644 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID;  743 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS 

5) 

6) 

7) 

8) 

9) 


HOUSING  GROUP 


2 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL; 

3/3 

3/2R 

AOA; 

3/3 

3/3 

ATO; 

3/3 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

;,  LCA  3;  AV 

BAY  4,  LCA  1 

FLIGHT  PHASE 
PRELAUNCH; 

LIFTOFF; 

ONORBIT; 

DEORBIT; 

LANDING/ SAFING; 

REDUNDANCY  SCREENS; 

LOCATION;  AV  BAY  6 

PART  NUMBER;  56V76A123AR  J6-Y  (153)  TYPE  III;  54V76A12i.AK  Jb-x 

TYPE  III 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-645 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/16/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT; 

2/lR 

MDAC  ID: 

744 

ABORT: 

3/3 

ITEM: 

DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS  HOUSING  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/ SAFING : 

HDW/FUNC 

3/3 

3/3 

2/lR 

3/3 

3/3 

ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

56V76A123AR  Jll-MM  (154)  TYPE  III;  54V76A121AR  Jll- 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  THE  HTR  "ON"  SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR 
GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE  EXCEEDING  THE  POD 
STRUCTURAL  QUALIFIED  LIMIT  OF  425  DEG  F AND  POSSIBLE  LOSS  OF 
VEHICLE  LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN  THAT  A 
4"  BY  8"  4 7W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX  TEMP  OF 
552  DEG  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615  DEG 
F UNDER  SAME  CONDITIONS.  AND  BOTH  TYPES  WILL  EXCEED  THE 
QUALIFIED  TEMP  OF  425  DEG  F IN  APPROXIMATELY  2 MIN. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-646 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  745 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY : 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS  HOUSING  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

PART  NUMBER:  56V76A123AR  Jll-MM  (154)  TYPE  III;  54V76A121AR  Jll- 

MM  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-647 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID;  746 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS  HOUSING  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS; 

LIFTOFF:  3/3  TAL: * 

ONORBIT;  2/lR  AOA: 

DEORBIT;  3/3  ATO; 

LANDING/SAFING;  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

m™  NUMBER;  56V76A123AR  J6-KK  (147)  TYPE  III;  54V76A121AR  Jll-J 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON” 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  HTR  GROUP  WOULD  RESULT  IN  BOTH  ELEMENTS  OF 
THE  HTR  "ON"  SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR  GROUP  IS 
ACTIVE  RESULTING  IN  A TEMPERATURE  EXCEEDING  THE  POD  STRUCTURAL 
QUALIFIED  LIMIT  OF  425  DEG  F AND  POSSIBLE  LOSS  OF  VEHICLE/LIFE 
DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN  THAT  A 4"  BY  8"  47W 
HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX  TEMP  OF  552  DEG  F AND  A 
1"  by  7"  low  HTR  WILL  HAVE  A MAX  TEMP  OF  615  DEG  F UNDER  SAME 
CONDITIONS.  AND  BOTH  TYPES  WILL  EXCEED  THE  QUALIFIED  TEMP  OF  425 
DEG  F IN  APPROXIMATELY  2 MIN. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-648 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  747 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS 

5) 

6) 

7) 

8) 

9) 


HOUSING  GROUP 


2 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION: 
PART  NUMBER: 
TYPE  III 


AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

56V76A123AR  J6-KK  (147)  TYPE  III;  54V76A121AR  Jll-J 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ATT.  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-649 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  748 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID,  LT/RT  RCS  HOUSING  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH : 3/3  RTLS : 

LIFTOFF;  3/3  TAL: * 

ONORBIT:  2/lR  AOA: 

DEORBIT:  3/3  ATO; 

LANDING/ SAFING;  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 

LOCATION:  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

P^T  NUMBER:  56V76A123AR  Jll-JJ  (148)  TYPE  III;  54V76A121AR  Jll- 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERTURE  EXCEEDING 
THE  POD  STRUCTUAL  QUALIFIED  LIMIT  OF  425  F AND  POSSIBLE  LOSS  OF 
VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN  THAT  A 
4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX  TEMP  OF 
552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615  F UNDER 
SAME  CONDITIONS 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-650 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID;  749 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


THERMAL  CONTROL  SUBSYSTEM 
DRIVER,  HYBRID,  LT/RT  RCS 


HOUSING  GROUP 


2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING 

3/3 
; 3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

6,  LCA  3;  AV 

BAY  4,  LCA  1 

PART  NUMBER;  56V76A123AR  Jll-JJ  (148)  TYPE  III;  54V76A121AR  Jll- 
JJ  TYPE  III 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-651 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

750 


ITEM: 

FAILURE  MODE: 


FUSE,  lOA 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 

FUSE,  lOA,  LT/RT  GSE  SERVICE  PANEL  GROUP  2 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 

HDW/FUNC 

3/3 

ABORT 

RTLS: 

HDW/FUNC 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, LCA  3;  AV  BAY 

4.  LCA  1 

PART  NUMBER:  56V76A123F  Jll-HH; 

54V76A121F  Jll- 

-HH 

contamination,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  A FAILED  OFF  CONDITION  FOR  THE  GSE  HTR  SYSTEM  WHICH  IS 
CONSIDERED  A FAIL  OPERATIONAL  CONDITION  SINCE  So  TEMPEMTuS 
LIMITS  WILL  BE  EXCEEDED.  LOSS  OF  ALL  REDUNDANCY  WILL  RESULT  IN 

INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL 

ENVIRONMENT . 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-652 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID;  751 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM;  FUSE,  lOA 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA,  LT/RT  GSE  SERVICE  PNL  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 
LANDING/ SAFING 

3/3 
; 3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION;  AV  BAY 

4,  LCA  1;  AV 

BAY 

5,  LCA  2 

PART  NUMBER;  54V76A121F  Jll-AA;  55V76A122F  Jll-HH 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE ; 

RESULTS  IN  A FAILED  OFF  CONDITION  FOR  THE  GSE  HTR  SYSTEM  WHICH  IS 
CONSIDERED  A FAIL  OPERATIONAL  CONDITION  SINCE  NO  TEMPERATURE 
LIMITS  WILL  BE  EXCEEDED.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN 
LOSS  OF  MISSION  DUE  TO  INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL 
ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT’82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-653 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID:  752 


ITEM;  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA,  LT/RT  LOWER  Y-WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/S AFING ; 

REDUNDANCY  SCREENS; 

LOCATION:  AV  BAY  4 

PART  NUMBER;  54V76A12 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL; 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

, LCA  1;  AV 

BAY  5,  LCA  2 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK, 

SHOCK,  OVERLOAD  ' 


THERMAL 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  OMS  POD  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES; 
28  JUNE‘85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-654 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  753 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUSE,  10 A 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA,  LT/RT  LOWER  Y-WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING 

3/3 
: 3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

6,  LCA  3;  AV 

BAY  4,  LCA  1 

PART  NUMBER:  56V76A123F  Jll-PP;  54V76A121F  Jll-PP 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  OMS  POD  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-655 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  754 


ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POO 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA,  LT/RT  OME  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/ SAFING ; 

REDUNDANCY  SCREENS: 

LOCATION;  AV  BAY  4 

PART  NUMBER;  54V76A12 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

, LCA  1;  AV 

BAY  5,  LCA  2 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  OME  COVER  HTR  SYSTEM  (LT/RT)  HTR'S.  REDUNDANT  HTR  GROUP 
AVAILABLE.  THE  OME  COVER  HTR'S  ARE  NOT  A CRITICAL  HTR  SYSTEM, 
BUT  Loss  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A ' 


LTR 


REPORT  DATE  02/04/87 


C-656 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID;  755 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  FUSE,  lOA 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA,  LT/RT  OME  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 
LANDING/ SAFING 

3/3 
; 3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION;  AV  BAY 

4,  LCA  1;  AV 

BAY 

5,  LCA  2 

PART  NUMBER;  54V76A121F  JllX';  55V76A122F  JllR' 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ENGINE  SERVICE  PANEL  HTR  SYSTEM  (LT/RT)  HTR'S.  REDUNDANT 
HTR  GROUP  AVAILABLE.  THE  ENGINE  SERVICE  PNL  HTR  SYSTEM  IS  NOT  A 
CRITICAL  HTR  SYSTEM,  BUT  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS 
OF  MISSION  DUE  TO  AN  INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL 
ENVIRONMENT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-657 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  756 


ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  10 A,  LT/RT  OME  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS; 

LOCATION;  AV  BAY  5 

PART  NUMBER:  55V76A1: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

, LCA  2;  AV 

BAY  6,  LCA  3 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  OME  COVER  HTR  SYSTEM  (LT/RT)  HTR'S.  REDUNDANT  HTR  GROUP 
AVAILABLE.  THE  OME  COVER  HTR’S  ARE  NOT  A CRITICAL  HTR  SYSTEM, 
BUT  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-658 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  757 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA,  LT/RT  OME  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TKL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122F  Jll-X';  56V76A123F  Jll-X* 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE:  , 

LOSS  OF  ENGINE  SERVICE  PANEL  HTR  SYSTEM  (LT/RT)  HTR'S.  REDUNDANT 
HTR  GROUP  AVAILABLE.  THE  ENGINE  SERVICE  PNL  HTR  SYSTEM  IS  NOT  A 
CRITICAL  HTR  SYSTEM,  BUT  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS 
OF  MISSION  DUE  TO  AN  INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL 
ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-659 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  758 


ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA,  LT/RT  UPPER  Y WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER:  54V76A121F  J6-LL;  55V76A122F  J6-L 


CAUSES:  CONTAMINATION, 

SHOCK,  OVERLOAD 


VIBRATION,  MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  PART  OF  THE  UPPER  Y-WEB  SYSTEM 
(LT/RT)  HTR'S.  REDUNDANT  HTR  GROUP  AVAILABLE.  SECOND  FAILURE 
WILL  RESULT  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO  MAINTAIN 
POD  THERMAL  ENVIRONMENT.  (SEE  FLIGHT  RULE  6-10) 


REFERENCES: 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-660 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  759 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA,  LT/RT  UPPER  Y WEB  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c C P ] 

LOCATION:  AV  BAY  4,  LCA  1;  AV  BAY  5,  LCA  2 

PART  NUMBER:  54V76A121F  J6-I';  55V76A122F  J6-AA 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE: 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  PART  OF  THE  UPPER  Y-WEB  SYSTEM 
(LT/RT)  HTR'S.  REDUNDANT  HTR  GROUP  AVAILABLE.  SECOND  FAILURE 
WILL  RESULT  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO  MAINTAIN 
POD  THERMAL  ENVIRONMENT.  (SEE  FLIGHT  RULE  6-10) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT*82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-661 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  760 

ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA,  LT/RT  UPPER  Y WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL*  * 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122F  J6-LL;  56V76A123F  J6-LL 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  PART  OF  THE  UPPER  Y-WEB  SYSTEM 
(LT/RT)  HTR'S.  REDUNDANT  HTR  GROUP  AVAILABLE.  SECOND  FAILURE 
WILL  RESULT  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO  MAINTAIN 
POD  THERMAL  ENVIRONMENT.  (SEE  FLIGHT  RULE  6-10) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A ' 


LTR 


REPORT  DATE  02/04/87 


C-662 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  761 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA,  LT/RT  UPPER  Y WEB  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122F  J6-I';  56V76A123F  J6-U' 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE: 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  PART  OF  THE  UPPER  Y-WEB  SYSTEM 
(LT/RT)  HTR'S.  REDUNDANT  HTR  GROUP  AVAILABLE.  SECOND  FAILURE 
WILL  RESULT  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO  MAINTAIN 
POD  THERMAL  ENVIRONMENT.  (SEE  FLIGHT  RULE  6-10) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-663 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  762 


ITEM:  FUSE,  20A 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  KEEL  WEB  & LOWER  Y-WEB  , GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AV  BAY  6,  PCA  3;  AV  BAY  4,  PCA  1 

PART  NUMBER:  56V76A133F4;  54V76A131F22 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK, 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  LOWER  Y-WEB  AND  KEEL  WEB  AND  WOULD 
BE  CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES: 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-664 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  763 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUSE,  20A 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  GSE  SERVICE  PNL  & RCS  HOUSING  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING 

3/3 
: 3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY 

4,  PCA  1;  AV 

BAY 

5,  PCA  2 

PART  NUMBER:  54V76A131F10;  55V76A132F4 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS /RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-665 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

1/16/87 

OMS 

764 

HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 

HDW/FUNC 

3/2R 

3/3 

ITEM: 

FUSE,  20A 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  GSE  SERVICE  PNL  & RCS  HOUSING  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING; 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  AV  BAY  6,  PCA  3;  AV  BAY  4,  PCA  1 

PART  NUMBER;  56V76A133F2;  54V76A131F19 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-666 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/16/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT;  3/2R 

MDAC  ID;  765  ABORT;  3/3 

ITEM;  FUSE,  20A 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  KEEL  WEB  & LOWER  Y-WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF;  3/3  TAL; 

ONORBIT;  3/2R  AOA; 

DEORBIT;  3/3  ATO; 

LANDING/SAFING;  3/3 

REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 

LOCATION;  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A131F11;  55V76A132F1 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  LOWER  Y-WEB  AND  KEEL  WEB  AND  WOULD 
BE  CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT*82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-667 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  766 


ITEM:  FUSE,  20A 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/S AFING; 

REDUNDANCY  SCREENS; 

LOCATION;  AV  BAY  4 

PART  NUMBER:  54V76A13 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL; 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

, PCA  1;  AV 

BAY  5,  PCA  2 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION). 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-"668 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  767 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  FUSE,  20A 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A131F8;  55V76A132F9 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-669 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  768 


ITEM:  FUSE,  20A 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY  4 

, PCA  1;  AV 

BAY 

5,  PCA  2 

PART  NUMBER:  54V76A131F7;  55V76A132F10 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-670 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  769 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM;  FUSE,  20A 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING 

3/3 
: 3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY 

6,  PCA  3;  AV 

BAY  4,  PCA  1 

PART  NUMBER:  56V76A133F1;  54V76A131F20 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION). 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-671 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID;  770 


ITEM;  FUSE,  20A 

FAILURE  MODE;  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 


PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION;  AV  BAY  5, 

PCA  2; 

AV  BAY 

6,  PCA  3 

PART  NUMBER;  56V76A132F6;  54V76A133F8 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-672 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID;  771 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  FUSE,  20A 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 
LANDING/ SAFING 

3/3 
; 3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY 

5,  PCA  2;  AV 

BAY  6,  PCA  3 

PART  NUMBER;  56V76A132F19 ; 54V76A133F6 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ATT.  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURE  AND  WOULD  BE  CAUSE  FOR  ENTRY 

ON  NEXT  DAILY  GO/NO-GO.  ^ 

OF  THE  SEVEN  KEEL  WEB  HYBRID  DRIVERS  THERE  ARE  THREE  OF  WHICH  A 
FAILURE  OF  ANY  ONE  WOULD  NOT  BE  DETECTABLE  IN  FLIGHT  (THE  FAILURE 
WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION.) 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-673 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

772 


ITEM: 

FAILURE  MODE: 


FUSE,  20A 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/3 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
FUSE,  20A,  LT/RT  OME  GROUP  1 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A131F6;  55V76A132F11 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A FAILED  OFF  CONDITION  FOR  THE  OME  HTR  SYSTEM, 
REDUNDANT  HTR  GROUP  AVAILABE.  THE  OME  HTR  SYSTEM  IS  NOT  A 
CRITICAL  HTR  SYSTEM,  BUT  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS 
OF  MISSION  DUE  TO  AN  INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL 
ENVIRONMENT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT*82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-674 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

773 


ITEM: 

FAILURE  MODE: 


FUSE,  20A 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
FUSE,  20A,  LT/RT  OME  GROUP  2 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

i,  PCA  2;  AV 

BAY  6,  PCA  3 

LOCATION:  AV  BA’ 

PART  NUMBER:  56V76A132F18;  54V76A133F7 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A FAILED  OFF  CONDITION  FOR  THE  OME  HTR  SYSTEM, 
REDUNDANT  HTR  GROUP  AVAILABE.  THE  OME  HTR  SYSTEM  IS  NOT  A 
CRITICAL  HTR  SYSTEM,  BUT  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS 
OF  MISSION  DUE  TO  AN  INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL 
ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-675 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  774 

'ITEM:  FUSE,  20A 

FAIUmE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  RCS  HOUSING  GROUP  1 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 

LOCATION:  AV  BAY  4 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

, PCA  1;  AV 

BAY  5,  PCA  2 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-676 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID;  775 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM;  FUSE,  20A 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  RCS  HOUSING  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

LANDING/SAFING 

3/3 
; 3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY 

6,  PCA  3;  AV 

BAY  4,  PCA  1 

PART  NUMBER;  56V76A133F3 ; 54V76A131F21 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-677 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID:  776 


ITEM:  FUSE,  20A 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  UPPER  Y WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


LOCATION: 
PART  NUMBER; 


AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 
54V76A131F5;  55V76A132F12 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION, 

SHOCK,  OVERLOAD 


MECHANICAL  SHOCK, 


THERMAL 


EFFECTS/RATIONALE : 

RESULTS  IN  LOSS  OF  UPPER  Y WEB  HTR'S,  REDUNDANT  HTR 
SECOND  FAILURE  WOULD  RESULT  IN  ^SS  O^F  MIsLoN 
FLIGHT  RuS^?-Yo)^°  maintain  PROPER  POD  THERMAL  ENVIRONMENT  (REF 


REFERENCES; 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-678 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID;  777 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM;  FUSE,  20A 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A,  LT/RT  UPPER  Y WEB  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS; 

LIFTOFF;  3/3  TAL; 

ONORBIT;  3/2R  AOA; 

DEORBIT;  3/3  ATO; 

LANDING/SAFING;  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  5,  PCA  2;  AV  BAY  6,  PCA  3 

PART  NUMBER;  55V76A132F5;  56V76A133F5 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


piS“I*SdS“^ults  in  loss  of  upper  y web  htr-s,  redundant  htr 

GROUP  AVAILABLE.  SECOND  FAILURE  WOULD  RESULT  IN  LOSS  OF  MISSION 
DUE  TO  INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT  (REF 
FLIGHT  RULE  6-10) . 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-679 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  778 


ITEM:  FUSE,  3 A 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  3 A,  LT/RT  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING ; 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  A14  SI 

PART  NUMBER:  36V73A14F3;  F16 


MOCK^’OVEMO^^^^'^^^^'  MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  FAILURE  OF  THE  GROUP  1 HTR'S. 
FAILURE  RESULTS  IN  LOSS  OF  BOTH  HTR  GROUPS  AND  THEREFORE 
MISSION  DUE  TO  INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL 
ENVIRONMENT . 


SECOND 
LOSS  OF 


REFERENCES: 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-680 


DATE; 

SUBSYSTEM: 
MDAC  ID; 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/16/87 

OMS 

779 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUSE,  3 A 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  3A,  LT/RT  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

REDUNDANCY  SCREENS; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  PNL  A14  SI 

PART  NUMBER;  36V73A14F1;  F14 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


effects /rationale  Z 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  GROUP  1 HTR'S.  SECOND  FAILURE 
RESULTS  IN  LOSS  OF  BOTH  HTR  GROUPS  AND  THEREFORE  LOSS  OF  MISSION 
DUE  TO  INABILITY  TO  MAINTAIN  POD  THERMAL  ENVIRONMENT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-681 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  780 


ITEM:  FUSE,  3 A 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  3 A,  LT/RT  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  PNL  A14  S2;  S5 

PART  NUMBER:  36V73A14F7;  F20 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


MOCK^*OvSlO^^^^^^°^'  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  FAILURE  OF  THE  GROUP  2 HTR'S. 
FAILURE  RESULTS  IN  LOSS  OF  BOTH  HTR  GROUPS  AND  THEREFORE 
MISSION  DUE  TO  INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL 
ENVIRONMENT. 


SECOND 
LOSS  OF 


REFERENCES: 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-682 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  781 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUSE,  3 A 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  3A,  LT/RT  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  A14  S2;  S5 

PART  NUMBER:  36V73A14F5;  F18 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  FAILURE  OF  THE  GROUP  2 HTR'S.  SECOND 
FAILURE  RESULTS  IN  LOSS  OF  BOTH  HTR  GROUPS  AND  THEREFORE  LOSS  OF 
MISSION  DUE  TO  INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL 
ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-683 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/19/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

782 

ABORT: 

3/3 

ITEM: 

HEATER,  LT/RT  ENG 

SERV  PNL  GROUP  1 

FAILURE  MODE 

::  FAILS  OPEN,  FAILS 

TO  PROVIDE  HEAT 

LEAD  ANALYST 

':  V.  J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  ENG  SERV  PNL  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  ENGINE  SERVICE  PANEL 

PART  NUMBER:  51V43HR  119,  121,  123,  125;  52V43HR  120,  122,  124, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  ENGINE  SERVICE 
PANEL  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-684 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID:  783 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM;  HEATER,  LT/RT  ENG  SERV  PNL  GROUP  1 

FAILURE  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  ENG  SERV  PNL  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 
REDUNDANCY  SCREENS: 

3/3 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  ENGINE  SERVICE  PANEL 

PART  NUMBER:  51V43HR  119,  121,  123,  125;  52V43HR  120,  122,  124, 

126 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  ENGINE  SERVICE 
PANEL  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-685 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  784 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  ENG  SERV  PNL  GROUP  2 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  ENG  SERV  PNL  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AOA; 

DEORBIT;  3/3  ATO; 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS;  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  ENGINE  SERVICE  PANEL 

PART  NUMBER;  51V43HR  119,  121,  123,  125;  52V43HR  120,  122,  124, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  ENGINE  SERVICE 
PANEL  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-686 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/19/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/2R 

MDAC  ID:  785  ABORT:  3/3 

ITEM:  HEATER,  LT/RT  ENG  SERV  PNL  GROUP  2 

FAILURE  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 

LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  ENG  SERV  PNL  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF: 

3/3 

TAL; 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  ENGINE  SERVICE  PANEL 

PART  NUMBER:  51V43HR  119,  121,  123,  125;  52V43HR  120,  122,  124, 

126 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  ENGINE  SERVICE 
PANEL  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-687 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  786 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  GSE  SERVICE  PNL  GROUP  1 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2 ) POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  GSE  SERVICE  PNL  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  GSE  SERVICE  PANEL 

PART  NUMBER:  51V43HR115,  129,  131,  133;  52V43HR116,  130,  132, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  HTR  MIGHT  NOT  BE  DETECTABLE.  WORST  CASE  WOULD  BE  LOSS  OF 
ASSOCIATED  GSE  SERVICE  PNL  GROUP  HTRS.  THE  REMAINING  HTR  SYSTEMS 
ARE  CAPABLE  OF  MAINTAINING  PROPER  THERMAL  ENVIRONMENT. 

LOSS  OF  ALL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  MISSION  DUE  TO 
INABILITY  TO  MAINTAIN  PRPOPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-688 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  787 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM; 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  GSE  SERVICE  PNL  GROUP 
pails  short,  shorts  to  MOUNTING  RESULTING  IN 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  GSE  SERVICE  PNL  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION: 
PART  NUMBER; 
134 


GSE  SERVICE  PANEL 

51V43HR115,  129,  131,  133;  52V43HR116,  130,  132, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE;  „„„„„„ 

RESULTS  IN  FAILED  OFF  CONDITION  FOR  GSE  SEVICE  PANEL  HTR  SYSTEM. 
THE  GSE  SERVICE  PNL  HTR  SYSTEM  IS  NOT  A CRITICAL  HTR  SYSTEM. 
REMAINING  HTR  SYSTEMS  MAINTAIN  THERMAL  ENVIRONMENT  WITHIN 
REDLINES . 

LOSS  OF  ALL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  MISSION  DUE  TO 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-689 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  788 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  GSE  SERVICE  PNL  GROUP  2 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  GSE  SERVICE  PNL  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 3 ] 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  GSE  SERVICE  PANEL 

P^T  NUMBER:  51V43HR115,  129,  131,  133;  52V43HR116,  130,  132, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

DETECTABLE.  WORST  CASE  WOULD  BE  LOSS  OF 
SERVICE  PNL  GROUP  HTRS.  THE  REMAINING  HTR  SYSTEMS 
ARE  CAPABLE  OF  MAINTAINING  PROPER  THERMAL  ENVIRONMENT. 

LOSS  OF  ALL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  MISSION  DUE  TO 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-690 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  789 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  GSE  SERVICE  PNL  GROUP  2 

FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  GSE  SERVICE  PNL  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  GSE  SERVICE  PANEL 

PART  NUMBER:  51V43HR115,  129,  131,  133;  52V43HR116,  130,  132, 

134 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  FAILED  OFF  CONDITION  FOR  GSE  SEVICE  PANEL  HTR  SYSTEM. 
THE  GSE  SERVICE  PNL  HTR  SYSTEM  IS  NOT  A CRITICAL  HTR  SYSTEM. 
REMAINING  HTR  SYSTEMS  MAINTAIN  THERMAL  ENVIRONMENT  WITHIN 
REDLINES . 

LOSS  OF  ALL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  MISSION  DUE  TO 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-691 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  790 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  LOWER  INBD  Y WEB  GROUP  1 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  LOWER  INBD  Y WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH : 3/3  RTLS : 

LIFTOFF;  3/3  TAL:  * 

ONORBIT;  3/2R  AOA: 

DEORBIT;  3/3  ATO* 

LANDING/SAFING:  3/3 


REDUNDANCY  SCREENS:  A [ 3 ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  LOWER  Y-WEB,  INBOARD 

PART  NUMBER;  51V43HR  57,  61,  73,  75,  77,  117 

52V43HR  58,  62,  74,  76,  78,  118,  128,  170,  172 


127, 


169, 


171; 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN  LOSS  OF  MISSION  DUE  TO 

MAINTAIN  PROPER  THERMAL  ENVIRONMENT  IN  THE  AREA  OF 
THE  OMS  TANK  ISOL  VALVES  AND  XFEED  LN'S. 


REFERENCES:  VS70-943099  REV  A EO  B12; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-692 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  791 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  HEATER,  LT/RT  LOWER  INBD  Y WEB  GROUP  1 

FAILURE  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  LOWER  INBD  Y WEB  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B C P ] 

C [ P ] 

LOCATION:  LOWER  Y-WEB,  INBOARD 

PART  NUMBER:  51V43HR  57,  61,  73,  75,  77,  117,  127,  169,  171; 

52V43HR  58,  62,  74,  76,  78,  118,  128,  170,  172 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN  LOSS  OF  MISSION  DUE  TO 
INABLILITY  TO  MAINTAIN  PROPER  THERMAL  ENVIRONMENT  IN  THE  AREA  OF 
THE  OMS  TANK  ISOL  VALVES  AND  XFEED  LN'S. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-693 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  792 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  LOWER  INBD  Y WEB  GROUP  2 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

ELECTRICAL  COMPONENTS 

2) 

POD 

3) 

THERMAL 

CONTROL  SUBSYSTEM 

4) 

HEATER, 

LT/RT  LOWER  INBD 

5) 

6) 

7) 

8) 

9) 

WEB  GROUP 


2 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF;  3/3  TAL: * 

ONORBIT;  3/2R  AOA: 

DEORBIT;  3/3  ATO: 

LANDING/ SAFING;  3/3 

REDUNDANCY  SCREENS;  A [ 3 ] B [ F ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION;  LOWER  Y-WEB,  INBOARD 

PART  NUMBER:  51V43HR  57,  61,  73,  75,  77,  117,  127, 

52V43HR  58,  62,  74,  76,  78,  118,  128,  170,  172 


169, 


171; 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN  LOSS  OF  MISSION  DUE  TO 
INABLILITY  TO  MAINTAIN  PROPER  THERMAL  ENVIRONMENT  IN  THE  AREA  OF 
THE  OMS  TANK  ISOL  VALVES  AND  XFEED  LN'S. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-694 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID;  793 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM; 

FAILURE  MODE; 
CIRCUIT 


HEATER,  LT/RT  LOWER  INBD  Y WEB  GROUP  2 

FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  LOWER  INBD  Y WEB  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/SAFING ; 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  LOWER  Y-WEB,  INBOARD 

PART  NUMBER;  51V43HR  57,  61,  73,  75,  77,  117,  127,  169,  171; 
52V43HR  58,  62,  74,  76,  78,  118,  128,  170,  172 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE: 

LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN  LOSS  OF  MISSION  DUE  TO 
INABLILITY  TO  MAINTAIN  PROPER  THERMAL  ENVIRONMENT  IN  THE  AREA  OF 
THE  OMS  TANK  ISOL  VALVES  AND  XFEED  LN'S. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-695 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  794 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  HEATER,  LT/RT  OME  COMPT  GROUP  1 

FAILURE  MODE;  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OME  COMPT  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 3 

B [ P ] 

C [ P 3 

LOCATION;  OME  COMPARTMENT 

PART  NUMBER;  51V43HR  79,  83;  52V43HR  80,  84 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME 
COMPARTMENT  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT 
LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES;  VS70-943099  REV  A EO  B12; 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-696 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/19/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  OMS  FLIGHT;  3/2R 

MDAC  ID;  795  ABORT;  3/3 

ITEM;  HEATER,  LT/RT  OME  COMPT  GROUP  1 

FAILURE  MODE;  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OME  COMPT  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ S AFING ; 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  OME  COMPARTMENT 

PART  NUMBER;  51V43HR  79,  83;  52V43HR  80,  84 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME 
COMPARTMENT  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT 
LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-697 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID;  796 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM;  HEATER,  LT/RT  OME  COMPT  GROUP  2 

FAILURE  MODE;  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OME  COMPT  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING ; 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL; 

AOA: 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  OME  COMPARTMENT 

PART  NUMBER;  51V43HR  79,  83;  52V43HR  80,  84 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME 
COMPARTMENT  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT 
LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-698 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  797 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  HEATER,  LT/RT  OME  COMPT  GROUP  2 

FAILURE  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OME  COMPT  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  OME  COMPARTMENT 

PART  NUMBER:  51V43HR  79,  83;  52V43HR  80,  84 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME 
COMPARTMENT  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT 
LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


c. 


REPORT  DATE  02/04/87 


C-699 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID;  798 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  HEATER,  LT/RT  OME  OUTBOARD  & INBOARD  COVER  GROUP  1 

FAILURE  MODE;  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OME  OUTBOARD  & INBOARD  COVER  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

c t P ] 

LOCATION;  OME  COVER 

PART  NUMBER;  51V43HR  87,  89,  207,  209;  52V43HR  88,  90,  208,  210 
CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME  COVER  HTR 
SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ATT. 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-700 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/19/87 

OMS 

799 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  OME  OUTBOARD  & INBOARD  COVER  GROUP  1 
FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 

HEATER,  LT/RT  OME  OUTBOARD  & INBOARD  COVER  GROUP  1 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  OME  COVER 

PART  NUMBER:  51V43HR 

87,  89,  207, 

209;  52V43HR 

88,  90,  208 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME  COVER  HTR 
SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-701 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  800 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  OME  OUTBOARD  & INBOARD  COVER  GROUP  2 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OME  OUTBOARD  & INBOARD  COVER  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  OME  COVER 

PART  NUMBER:  51V43HR  87,  89,  207,  209;  52V43HR  88,  90,  208,  210 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME  COVER  HTR 
SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-702 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  801 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  OME  OUTBOARD  & INBOARD  COVER  GROUP  2 

FAILURE  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OME  OUTBOARD 

5) 

6) 

7) 

8) 

9) 


& INBOARD  COVER  GROUP 


2 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  OME  COVER 

PART  NUMBER:  51V43HR  87,  89,  207,  209;  52V43HR  88,  90,  208,  210 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME  COVER  HTR 
SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-703 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  802 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  OMS  ENG  COMPT  GROUP  1 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OMS  ENG  COMPT 

5) 

6) 

7) 

8) 

9) 


GROUPl 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS: 

LIFTOFF;  3/3  TAL: * 

ONORBIT;  3/2R  AOA: 

DEORBIT;  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


LOCATION:  OME  COMPARTMENT 

PART  NUMBER:  51V43HR  81,  85;  52V43HR  82,  86 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME 
COMPARTMENT  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT 
LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES;  VS70-943099  REV  A EO  B12; 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-704 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/19/87 

OMS 

803 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  OMS  ENG  COMPT  GROUP 
FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OMS  ENG  COMPT  GROUPl 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P 1 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  OME  COMPARTMENT 

PART  NUMBER:  51V43HR  81,  85;  52V43HR  82,  86 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME 
COMPARTMENT  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT 
LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-705 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID;  804 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM; 

FAILURE  MODE; 


HEATER,  LT/RT  OMS  ENG  COMPT  GROUP  2 
FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OMS  ENG  COMPT  GROUP2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS; 

TAL; 

AOA; 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  OME  COMPARTMENT 

PART  NUMBER;  51V43HR  81,  85;  52V43HR  82,  86 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OMI 
COMPARTMENT  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABU 
LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


, BUT 
TO  AN 


REFERENCES;  VS70-943099  REV  A EO  B12; 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-706 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  805 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  OMS  ENG  COMPT  GROUP  2 

FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OMS  ENG  COMPT  GROUP2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  OME  COMPARTMENT 

PART  NUMBER;  51V43HR  81,  85;  52V43HR  82,  86 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME 
COMPARTMENT  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT 
LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-707 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  806 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  HEATER,  LT/RT  OMS  KEEL  WEB  GROUP  1 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OMS  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT; 

LANDING/SAFING: 

3/3 

3/3 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] 


B [ F ] 


C t P ] 


LOCATION:  KEEL  WEB 

PART  NUMBER:  51V43HR  17,  19,  21,  23,  25,  29, 

45,  47;  52V43HR  18,  20,  22,  24,  26,  30,  32,  34 


31,  33, 

, 38,  42 


37,  41,  43, 
, 44,  46, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 

desired  temp.  failure  of  all  redundancy  WOULD  BE 
CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO-GO.  A FAILURE  IN  ANY  ONE  OF 
THE  47W  HTR'S  COULD  GO  UNDETECTED  DURING  FLIGHT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-708 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID;  807 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM; 

FAILURE  MODE; 
CIRCUIT 


HEATER,  LT/RT  OMS  KEEL  WEB  GROUP  1 

fails  short,  shorts  to  mounting  resulting  in  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OMS  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION;  KEEL  WEB 

PART  NUMBER:  51V43HR 

17,  19,  21, 

23,  25,  29, 

31,  33,  37, 

45,  47;  52V43HR  18,  20,  22,  24,  26,  30,  32,  34,  38,  42,  44,  46, 
48 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMP.  FAILURE  OF  ALL  REDUNDANCY  WOULD  BE 
CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO-GO.  OUT  OF  THE  14  HTR'S 
THERE  ARE  SIX  IN  WHICH  A SHORT  WOULD  NOT  BE  DETECTED 
(HR19,21,25,29,41,47/HR20,22,26,30,42,48),  BUT  FAILURE  OF  ANY  OF 
THE  SIX  WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-709 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  808 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  OMS  KEEL  WEB  GROUP  2 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OMS  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] B [ F ] 


C [ P ] 


LOCATION:  KEEL  WEB 

PART  NUMBER:  51V43HR  17,  19,  21,  23,  25,  29,  31,  33, 

45,  47;  52V43HR  18,  20,  22,  24,  26,  30,  32,  34,  38,  42 


37,  41,  43, 
/ 44,  46, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMP.  FAILURE  OF  ALL  REDUNDANCY  WOULD 
CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO-GO.  A FAILURE  IN  ANY  ONE 
THE  47W  HTR'S  COULD  GO  UNDETECTED  DURING  FLIGHT. 


BE 

OF 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-710 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID:  809 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  OMS  KEEL  WEB  GROUP  2 

fails  short,  shorts  to  mounting  RESULTING  IN  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OMS  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ F ] 

C [ P ] 

LOCATION:  KEEL  WEB 

PART  NUMBER:  51V43HR 

17,  19,  21, 

23,  25,  29, 

31,  33,  37, 

45,  47;  52V43HR  18,  20,  22,  24,  26,  30,  32,  34,  38,  42,  44,  46, 
48 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMP.  FAILURE  OF  ALL  REDUNDANCY  WOULD  BE 
CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO-GO.  OUT  OF  THE  14  HTR'S 
THERE  ARE  SIX  IN  WHICH  A SHORT  WOULD  NOT  BE  DETECTED 
(HR19,21,25,29,41,47/HR20,22,26,30,42,48),  BUT  FAILURE  OF  ANY  OF 
THE  SIX  WOULD  NOT  RESULT  IN  AN  UNSAFE  CONDITION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-711 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  810 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  HEATER,  LT/RT  OMS  TEST  PORT  GROUP  1 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
HEATER,  LT/RT  OMS  TEST  PORT 


GROUP  1 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION;  OMS  TEST  PORT 

PART  NUMBER;  51V43HR  191;  52V43HR  192 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

EVEN  WITH  THE  LOSS  OF  ALL  REDUNDANCY  ADEQUATE  PROPELLANT 
TEMPERATURE  WILL  BE  MAINTAINED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-712 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID;  811 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM; 

FAILURE  MODE; 
CIRCUIT 


HEATER,  LT/RT  OMS  TEST  PORT  GROUP  1 

fails  short,  shorts  to  mounting  resulting  in  open 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OMS  TEST  PORT  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A t ] 

B [ ] 

c [ ] 

LOCATION;  OMS  TEST  PORT 

PART  NUMBER;  51V43HR  191;  52V43HR  192 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

FAILURE  OF  HTR  WILL  DISABLE  2-47W  KEEL  WEB  HTR'S  REMAINING  KEEL 
WEB  HTR'S  ARE  CAPABLE  OF  MAINTAINING  PROPER  PROPELLANT  TEMP. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-713 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/19/87 

OMS 

812 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM: 

FAILURE  MODE: 


HEATER,  LT/RT  OMS  TEST  PORT  GROUP  2 
FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
HEATER,  LT/RT  OMS  TEST  PORT  GROUP  2 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


REDUNDANCY  SCREENS;  A [ ] 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

B [ ] 


C [ ] 


LOCATION; 
PART  NUMBER; 


OMS  TEST  PORT 

51V43HR  191;  52V43HR  192 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

EVEN  WITH  THE  LOSS  OF  ALL  REDUNDANCY  ADEQUATE  PROPELLANT 
TEMPERATURE  WILL  BE  MAINTAINED. 


REFERENCES:  VS70-943099  REV  A EO  B12; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-714 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  813 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  HEATER,  LT/RT  OMS  TEST  PORT  GROUP  2 

FAILURE  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D. J . PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OMS  TEST  PORT  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  OMS  TEST  PORT 

PART  NUMBER:  51V43HR 

191;  52V43HR 

192 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FAILURE  OF  HTR  WILL  DISABLE  2-47W  KEEL  WEB  HTR'S  REMAINING  KEEL 
WEB  HTR'S  ARE  CAPABLE  OF  MAINTAINING  PROPER  PROPELLANT  TEMP. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-715 


DATE: 

SUBSYSTEM: 

MOAC  ID: 

ITEM: 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 

LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OX  PRESS  PNL  GROUP  1 

5) 

6) 

7) 

8) 

9) 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/19/87 

OMS 

814 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


HEATER,  LT/RT  OX  PRESS  PNL  GROUP  1 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL; 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  OXIDIZER  PRESS  PANEL 

PART  NUMBER:  51V43HR  223,  225,  227;  52V43HR  224,  226,  228 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

IX)SS  OF  ALL  OX  PRESS  PNL  (FAILED  OPEN)  HTR'S  WOULD  RESULT  IN  A 
LONGER  DUTY  CYCLE  FOR  THE  KEEL  WEB  HTR  SYSTEM.  POSSIBLY 
RESULTING  IN  HIGHER  THAN  DESIRED  TEMPS  IF  NO  ACTION  TAKEN, 
THEREFORE  CREW  MIGHT  BE  REQUIRED  TO  CYCLE  HTR  SYSTEM. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-716 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  815 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  OX  PRESS  PNL  GROUP  1 

FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OX  PRESS  PNL  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  OXIDIZER  PRESS  PANEL 

PART  NUMBER:  51V43HR  223,  225,  227;  52V43HR  224,  226,  228 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN  FAILURE  OF  THE  KEEL  WEB 
HTR  SYSTEM  (THESE  HTRS  ARE  PART  OF  THE  KEEL  WEB  SYSTEM  AND  A FAIL 
SHORT  FOR  ALL  WOULD  FAIL  SIX/GROUP  OF  THE  KEEL  WEB  HTRS)  AND 
WOULD  BE  CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-717 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM; 
MDAC  ID; 


1/19/87 

OMS 

816 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM; 

FAILURE  MODE; 


HEATER,  LT/RT  OX  PRESS  PNL  GROUP  2 
FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
HEATER,  LT/RT  OX  PRESS  PNL  GROUP  2 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS; 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA; 

3/3 

3/3 

ATO; 

3/3 

3/3 

REDUNDANCY  SCREENS;  A [ ] B 


C [ ] 


LOCATION;  OXIDIZER  PRESS  PANEL 

PART  NUMBER;  51V43HR  223,  225,  227;  52V43HR  224,  226,  228 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  OX  PRESS  PNL  (FAILED  OPEN)  HTR'S  WOULD  RESULT  IN  A 
LONGER  DUTY  CYCLE  FOR  THE  KEEL  WEB  HTR  SYSTEM.  POSSIBLY 
RESULTING  IN  HIGHER  THAN  DESIRED  TEMPS  IF  NO  ACTION  TAKEN 
THEREFORE  CREW  MIGHT  BE  REQUIRED  TO  CYCLE  HTR  SYSTEM. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-718 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/19/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/2R 

MDAC  ID:  817  ABORT:  3/3 

ITEM:  HEATER,  LT/RT  OX  PRESS  PNL  GROUP  2 

FAILURE  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 

LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  OX  PRESS  PNL  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  OXIDIZER  PRESS  PANEL 

PART  NtJMBER:  51V43HR  223,  225,  227;  52V43HR  224,  226,  228 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  COULD  RESULT  IN  FAILURE  OF  THE  KEEL  WEB 
HTR  SYSTEM  (THESE  HTRS  ARE  PART  OF  THE  KEEL  WEB  SYSTEM  AND  A FAIL 
SHORT  FOR  ALL  WOULD  FAIL  SIX/GROUP  OF  THE  KEEL  WEB  HTRS)  AND 
WOULD  BE  CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-719 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  818 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  RCS  HOUSING  DRAIN  PNL  GROUP  1 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  DRAIN  PNL  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 3 3 

B [ P ] 

C [ P ] 

LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V42HR215,  217,  219,  221;  52V42HR216,  218,  220, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO.  ru« 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-720 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  819 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  HEATER,  LT/RT  RCS  HOUSING  DRAIN  PNL  GROUP  1 

FAILURE  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  DRAIN  PNL  GROUP  1 

5) 

6) 

7) 

8) 

9) 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V42HR215,  217,  219,  221;  52V42HR216,  218,  220, 

222 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-721 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  820 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  HEATER,  LT/RT  RCS  HOUSING  DRAIN  PNL  GROUP  2 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  DRAIN  PNL  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  RCS  HOUSING 

P^T  NUMBER;  51V42HR215,  217,  219,  221;  52V42HR216,  218,  220, 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 


LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-722 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


1/19/87 

OMS 

821 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM; 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  RCS  HOUSING  DRAIN  PNL  GROUP  2 
FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  DRAIN  PNL  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  RCS  HOUSING 

PART  NUMBER:  51V42HR215,  217,  219,  221;  52V42HR216,  218,  220, 

222 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-723 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

1/19/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

822 

ABORT; 

3/3 

ITEM; 

HEATER, 

LT/RT  RCS  HOUSING  PITCH  DN  GROUP 

1 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 

LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  PITCH  DN  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ F ] 

C [ P ] 

LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43HR  159.  161,  163,  165,  167,  155,  157;  52V43HR 

160.  162,  164,  166,  164,  156,  158 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-724 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  823 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  RCS  HOUSING  PITCH  DN  GROUP 
FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  PITCH  DN  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A[3]  B[P]  C[P] 


LOCATION:  RCS  HOUSING  ..ott.otttj 

PART  NUMBER:  51V43HR  159.  161,  163,  165,  167,  155,  157?  52V43HR 

160.  162,  164,  166,  164,  156,  158 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE: 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-725 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  824 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


HEATER,  LT/RT  RCS  HOUSING  PITCH  DN  GROUP  2 
FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  PITCH  DN  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/ SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] B 

[ F ] 

C [ P ] 

LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43HR  159.  161,  163, 

160.  162,  164,  166,  164,  156,  158 

165,  167, 

155,  157;  52V43HR 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 

THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO.  ruK 


REFERENCES:  VS70-943099  REV  A EO  B12; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-726 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


1/19/87 

OMS 

825 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


HPATER  LT/RT  RCS  HOUSING  PITCH  DN  GROUP  2 
FAILURE  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 

HEATER,  LT/RT  RCS  HOUSING  PITCH  DN  GROUP  2 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/2R 

3/3 


RTLS; 

TAL: 

AOA: 

ATO: 


LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS;  A [ 3 ] 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  RCS  HOUSING 

PART  NUMBER;  51V43HR  159.  161,  163,  165,  167,  155,  157,  5 
160.  162,  164,  166,  164,  156,  158 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAU 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-727 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


HDW/FUNC 

3/2R 

3/3 

1 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  PITCH  UP  GROUP  1 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM; 
MDAC  ID: 


1/19/87 

OMS 

826 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM; 

FAILURE  MODE; 


HEATER,  LT/RT  RCS  HOUSING  PITCH  UP  GROUP 
FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING ; 


HDW/FUNC 
3/3 
3/3 
3/2R 
3/3 
3/3 


CRITICALITIES 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO; 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ 3 ] B [ F ] 

LOCATION;  RCS  HOUSING 

^0^ 


c c P ] 


52V43HR  92, 


94, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

l^SS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MATMTaTu 


REFERENCES;  VS70-943099  REV  A EO  B12* 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E; 
PCN-1 


JSC 


REPORT  DATE  02/04/87 


C-728 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  827 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  RCS  HOUSING  PITCH  UP  GROUP  1 
FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  PITCH  UP  GROUP  1 

5) 

6) 

7) 

a) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43HR  91,  93,  95,  97,  99,  103;  52V43HR  92,  94, 

96,  98,  100,  104 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-729 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  828 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  HEATER,  LT/RT  RCS  HOUSING  PITCH  UP  GROUP  2 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  PITCH  UP  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


PLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING : 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ F ] 

C [ P ] 

LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43HR  91,  93,  95, 

96,  98,  100,  104 

97,  99,  103; 

52V43HR  92 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


JSC 


REPORT  DATE  02/04/87 


C-730 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/19/87 

OMS 

829 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  RCS  HOUSING  PITCH  UP  GROUP  2 

short,  shorts  to  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  PITCH  UP  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ S AFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43HR  91,  93,  95,  97,  99,  103; 

96,  98,  100,  104 


52V43HR  92, 


94, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


MAINTAIN 
BE  CAUSE  FOR 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-731 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/2R 
3/3 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  VERNIER  GROUP  1 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/19/87 

OMS 

830 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


HEATER,  LT/RT  RCS  HOUSING  VERNIER  GROUP  1 
FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43HR  149,  151,  153;  52V43HR  150,  152,  154 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 


REFERENCES:  VS70-943099  REV  A EO  B12; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-732 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  831 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  HEATER,  LT/RT  RCS  HOUSING  VERNIER  GROUP  1 

FAILURE  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  VERNIER  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 
REDUNDANCY  SCREENS; 

3/3 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  RCS  HOUSING 

PART  NUMBER;  51V43HR  149,  151, 

153;  52V43HR  150 

, 152,  154 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-733 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/19/87 

HIGHEST 

CRITICALITY 

HDW/FUNC 

SUBSYSTEM;  OMS 

FLIGHT; 

3/2R 

MDAC  ID:  832 

ABORT; 

3/3 

ITEM; 

HEATER,  LT/RT  RCS 

HOUSING  VERNIER  GROUP  2 

FAILURE  MODE: 

FAILS  OPEN,  FAILS 

TO  PROVIDE 

HEAT 

LEAD  ANALYST; 

V.  J.  BURKEMPER 

SUBSYS 

LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  VERNIER  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FU 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ F ] 

C [ P ] 

LOCATION:  RCS  HOUSING 

PART  NUMBER;  51V43HR  149,  151,  153;  52V43HR  150,  152,  154 
CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-734 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  833 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  RCS  HOUSING  VERNIER  GROUP  2 

FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  VERNIER  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43HR  149,  151,  153;  52V43HR  150,  152,  154 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-735 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  834 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  HEATER,  LT/RT  RCS  HOUSING  YAW  GROUP  1 

FAILURE  MODE:  FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  YAW  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: ' 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 3 ] 


B [ F ] 


C [ P ] 


LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43HR  105,  107,  109, 

213;  52V43HR  106,  108,  110,  114,  142 


113,  141,  145,  143, 
146,  144,  212,  214 


211, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-736 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  835 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  RCS  HOUSING  YAW  GROUP  1 

FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  YAW  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43HR  105,  107,  109,  113,  141,  145,  143,  211, 

213;  52V43HR  106,  108,  110,  114,  142,  146,  144,  212,  214 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-737 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  836 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


HEATER,  LT/RT  RCS  HOUSING  YAW  GROUP  2 
FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


HDW/FUNC 

3/2R 

3/3 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  YAW  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/ SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ 3 ] 


C [ P ] 


LOCATION:  RCS  HOUSING 

PART  NUMBER;  51V43HR  105,  107,  109, 

213;  52V43HR  106,  108,  110,  114,  142 


113,  141,  145,  143, 
146,  144,  212,  214 


211, 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 


REFERENCES:  VS70-943099  REV  A EO  B12; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-738 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  837 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  RCS  HOUSING  YAW  GROUP 
FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  RCS  HOUSING  YAW  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  RCS  HOUSING 

PART  NUMBER:  51V43HR 

105,  107, 

109,  113,  141, 

145,  143,  211, 

213;  52V43HR  106,  108 

, 110,  114, 

142,  146,  144, 

212,  214 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-739 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  838 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


HEATER,  LT/RT  UPPER  INBOARD  Y WEB  GROUP  1 
FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  UPPER  INBOARD  Y WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  UPPER  Y-WEB,  INBOARD 

PART  NUMBER:  51V43HR  59,  63,  65,  67;  52V43HR  60,  64,  66,  68 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

MISULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  UPPER  INBOARD 
Y-WEB  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAlLABli?  BUT  MsfOT 

REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-740 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID;  839 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM; 

FAILURE  MODE; 
CIRCUIT 


HEATER,  LT/RT  UPPER  INBOARD  Y WEB  GROUP  1 

FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  UPPER  INBOARD  Y WEB  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] B 

[ p 1 

C [ P ] 

LOCATION;  UPPER  Y- 

■WEB,  INBOARD 

PART  NUMBER;  51V43HR 

59,  63,  65,  67; 

52V43HR 

60,  64,  66, 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE; 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  UPPER  INBOARD 
Y-WEB  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF 
ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-741 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  840 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


HEATER,  LT/RT  UPPER  INBOARD  Y WEB  GROUP  2 
FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  UPPER  INBOARD  Y WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  UPPER  Y-WEB,  INBOARD 

PART  NUMBER:  51V43HR  59,  63,  65,  67;  52V43HR  60,  64,  66,  68 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  UPPER  INBOARD 
Y-WEB  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF 
ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT.  io 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-742 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  841 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
CIRCUIT 


HEATER,  LT/RT  UPPER  INBOARD  Y WEB  GROUP  2 

FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  UPPER  INBOARD  Y WEB  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] B 

[ P ] 

C [ P ] 

LOCATION:  UPPER  Y- 

•WEB,  INBOARD 

PART  NUMBER:  51V43HR 

59,  63,  65,  67; 

52V43HR 

60,  64,  66, 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS /RATIONALE  S 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  UPPER  INBOARD 
Y-WEB  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF 
ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-743 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  842 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


HEATER,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  1 
FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  UPPER  Y-WEB,  OUTBOARD 

PART  NUMBER:  51V43HR  49,  51,  53,  55;  52V43HR  50,  52,  54,  56 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

^ POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  UPPER  OUTBOARD 
Y-WEB  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF 

RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-744 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

,/,q/o7  highest  CRITICALITY  HDW/FUNC 

DATE;  1/19/87  FLIGHT:  3/2R 

SUBSYSTEM:  OMS  ABORT:  3/3 

MDAC  ID:  843 

tiwRrp'P'D  TT’/BT  UPPER  OUTBOARD  Y WEB  GROUP  1 
mode:  MODMTIHG  RESULTING  IN  OPEN 

CIRCUIT 

SUBSYS  LEAD;  D.J.  PAUL 


LEAD  ANALYST;  V.  J.  BURKEMPER 


BREAKDOWN  HIERARCHY : 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM  -nr.TTt>  i 

HEATER,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  1 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

mraTTON*  UPPER  Y-WEB,  OUTBOARD 

^ SSmBER:  5XV43HR  49,  51,  53,  55:  52V43HR  50,  52,  54,  56 

causes:  contamination,  vibration,  piece  part  failure,  overload 

mSSs^mT^^ible  failed  off  condition  for 

HEi’'/cTRESU^TTK^^^ 

MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  812; 

18549/  OCT  82,  LTR  JUNE  85;  JSC  20923 


73A760210  REV  E;  JSC 
PCN-1 


REPORT  DATE  02/04/87 


C-745 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

1/19/87 
OMS 
844 


ITEM: 

FAILURE  MODE: 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 

lt/rt  upper  outboard  y web  group  2 

FAILS  OPEN,  FAILS  TO  PROVIDE  HEAT 
tEAD  ANALYST:  V.  J.  BHEKEMPER  SOBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  HEATER,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  2 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 

ONORBIT 
DEORBIT; 
LANDING/SAFING  : 


CRITICALITIES 


hdw/func 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

hdw/func 

3/3 

3/3 

3/3 

3/3 

A [ 2 ] 

B C P ] 

C [ P ] 

REDUNDANCY  SCREENS: 

LOCATION:  UPPER  '' 

PANT  NUMBEP:  51V43HR  4s7  52V43HE  BO,  52,  54,  56 

causes:  contamination,  vibration,  piece  part  failure,  overload 
effects/rationale : 

Sra“^"sYSTEMf^®SDUHDAOT  HTO  GROUp’avMuIl?™ 

ALL  REDUNDANCY  RESUTTq  tm  Tnc<^t,  AVAILABLE,  BUT  LOSS  OF 

maintain  proper  pod  therma^  ENv^RoSiSl^f"  inability  to 


VS70-943099  REV  A EO  B1 
18549,  OCT  82,  LTR  JUNE  85;  JSC  2092 


73A760210  REV  E;  JSC 
PCN-1 


report  date  02/04/87 


C-746 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  845 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


Trnr.M.  HEATER  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  2 

FAIL^  MODE:  FAILS  SHORT,  SHORTS  TO  MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM  o 

HEATER,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  2 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


HDW/FUNC 
3/3 
3/3 
3/2R 
3/3 


CRITICALITIES 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  UPPER  Y-WEB,  OUTBOARD 

PART  NUMBER:  51V43HR  49,  51,  53,  55;  52V43HR  50,  52,  54,  5 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

failed  off  conditioh  for  the  offer  outboard 

Y-WEB  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF 
ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  T 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-747 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

846 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


RELAY 

FAILS  HIGH  (ENERGIZED  POSITION) 
LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
RELAY,  LT/RT  GROUP  1 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


HDW/FUNC 

3/3 

3/3 

2/lR 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

^ CRITICALITIES 

FLIGHT  PHASE 

PRELAUNCH: 

LIFTOFF: 

ONORBIT: 

DEORBIT: 

LANDING/SAFING; 

REDUNDANCY  SCREENS: 

^CATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A131K3;  55V76A132K5 

CADSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  PAIUIRE,  OVERLOAD 

EFFECTS/RATIONALE : 

REMOVE  POWER  TO  FROM  PART  OF  GROUP  1 HTR  SYSTEM 
UNLESS  A SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WHICH 
both  elements  of  two  or  more  HTR'S  “ON” 
when  the  redundant  HTR  GROUP  IS  ACTIVE  RESULTING 

exceeding  the  pod  structuLl  odS^f^e^ L?J?f  of 

WiS  hI^E  A ® WITH  BOTH  ELEMENTS  ON 

LiXj  have  a max  temp  of  552  F AND  A 1**  BY  7**  low  WTP  wttt  a 

MAX  TEMP  OF  615  F UNDER  SAME  CONDITIONS  ^ 

VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82  LTR 
28  JUNE'85?  JSC  20923  PCN-1;  73A760210  REV  A ' 


REPORT  DATE  02/04/87 


C-748 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  847 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RELAY,  LT/RT  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A131K3;  55V76A132K5 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  GROUP  1 HTR'S,  GROUP  2 STILL 
FULLY  OPERATIONAL.  LOSS  OF  ALL  REDUNDANCY  (2ND  FAILURE)  RESULTS 
IN  LOSS  OF  MISSION  DUE  TO  INABILITY  TO  MAINTAIN  POD  THERMAL 
ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-749 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
2/lR 
3/3 

ITEM:  RELAY 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

848 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RELAY,  LT/RT  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRE  LAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A131K4;  55V76A132K6 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  REMOVE  POWER  TO  FROM  PART  OF  GROUP  1 HTR  SYSTEM. 
NO  EFFECT  UNLESS  A SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WHICH 
WOULD  RESULT  IN  BOTH  ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON" 
SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING 
IN  A TEMPERATURE  EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF 
425  F AND  POSSIBLE  LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE. 
TESTS  HAVE  SHOWN  THAT  A 4”  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON 
WILL  HAVE  A MAX  TEMP  OF  5 52  F AND  A 1"  BY  7«  lOW  HTR  WILL  HAVE  A 
MAX  TEMP  OF  615  F UNDER  SAME  CONDITIONS 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-750 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID;  849 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  RELAY 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RELAY,  LT/RT  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

LANDING/SAFING 

3/3 
; 3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY 

4,  PCA  1;  AV 

BAY  5,  PCA  2 

PART  NUMBER;  54V76A131K4;  55V76A132K6 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  GROUP  1 HTR'S, 
FULLY  OPERATIONAL.  LOSS  OF  ALL  REDUNDANCY  (2ND 
IN  LOSS  OF  MISSION  DUE  TO  INABILITY  TO  MAINTAIN 
ENVIRONMENT. 


GROUP  2 STILL 
FAILURE)  RESULTS 
POD  THERMAL 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-751 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

QMS 

850 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


RELAY 

FAILS  HIGH  (FAILS  ENERGIZED) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
RELAY,  LT/RT  GROUP  2 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
8) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

2/lR 

3/3 

3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


B [ P ] 


C [ P ] 


REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AV  BAY  6,  PCA  3,  AV  BAY  4,  PCA  1 

PART  NUMBER:  56V76A133K5;  54V76A131K5 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

remove  power  to  from  part  of  group  1 HTR  SYSTEM. 
UNLESS  A SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WHICH 
WOULD  RESULT  IN  BOTH  ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON" 
SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING 

EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF 
mofmo  POSSIBLE  LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE. 

^ WITH  BOTH  ELEMENTS  ON 

^ TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A 

MAX  TEMP  OF  615  F UNDER  SAME  CONDITIONS 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  7 3A7 6 02 10  REV  A ' 


REPORT  DATE  02/04/87 


C-752 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  851 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RELAY,  LT/RT  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6,  PCA  3,  AV  BAY  4,  PCA  1 

PART  NUMBER:  56V76A133K5;  54V76A131K5 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  GROUP  2 HTR'S,  GROUP  1 STILL 
FULLY  OPERATIONAL.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF 
MISSION  DUE  TO  INABILITY  TO  MAINTAIN  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-753 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/16/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

2/lR 

MDAC  ID: 

852 

ABORT: 

3/3 

ITEM: 

RELAY 

FAILURE  MODE 

!:  FAILS  HIGH 

LEAD  ANALYST 

':  V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RELAY,  LT/RT  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A 

[ ] 

B [ 

] 

c [ ] 

LOCATION:  AV  BAY  5, 

PCA  2,  AV 

BAY  6, 

PCA  3 

PART  NUMBER:  55V76A132K4;  56V76A133K3 

CAUSES : CONTAMINATION , 

VIBRATION, 

PIECE 

PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  REMOVE  POWER  TO  FROM  PART  OF  GROUP  1 HTR  SYSTEM. 
NO  EFFECT  UNLESS  A SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WHICH 
WOULD  RESULT  IN  BOTH  ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON” 
SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING 
IN  A TEMPERATURE  EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF 
425  F AND  POSSIBLE  LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE. 
TESTS  HAVE  SHOWN  THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON 
WILL  HAVE  A MAX  TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A 
MAX  TEMP  OF  615  F UNDER  SAME  CONDITIONS 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT*82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-754 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  853 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RELAY,  LT/RT  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

LANDING/SAFING 

3/3 
: 3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

5,  PCA  2,  AV 

BAY  6,  PCA  3 

PART  NUMBER:  55V76A132K4;  56V76A133K3 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE;  c-m-rTT 
FIRST  FAILURE  RESULTS  IN  LOSS  OF  GROUP  2 HTR'S,  GROUP  1 STILL 
FULLY  OPERATIONAL.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF 
MISSION  DUE  TO  INABILITY  TO  MAINTAIN  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-755 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

854 


ITEM: 

FAILURE  MODE: 


RESISTOR,  1.2K  2W 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 

RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  1 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 

LIFTOFF: 

ONORBIT: 

DEORBIT: 

LANDING/SAFING; 

REDUNDANCY  SCREENS: 

LOCATION:  AV  BAY  4 

PART  NUMBER:  54V76A12 

VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

EFFECTS/RATIONALE : 

^SS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 

o2  nI^Iily’^go/no^o  and  would  be  cause  for  entry 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

, PCA  1;  AV 

BAY  5,  PCA  2 

REFERENCES: 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549 
JSC  20923  PCN-1;  73A760210  REV  A 


15  OCT'82, 


LTR 


REPORT  DATE  02/04/87 


C-756 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID;  855 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM;  RESISTOR,  1.2K  2W 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS; 

LIFTOFF:  3/3  TAL; 

ONORBIT;  3/2R  AOA; 

DEORBIT;  3/3  ATO; 

LANDING/ SAFING;  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION;  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER;  54V76A121R  J4-8B;  55V76A122R  J3-127B 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS /RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURES  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C~757 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  856 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AO  A: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ ] 

B C ] 

c [ ] 

LOCATION: 
PART  NUMBER: 


AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 
54V76A121R  J4-8A;  55V76A122R  J3-127A 


CAUSES:  CONTAMINATION,  VIBRATION 

SHOCK,  OVERLOAD 


, MECHANICAL  SHOCK, 


THERMAL 


EFFECTS/RATIONALE : 

NONE,  I^EL  WEB  HTR  SYSTEM  STILL  OPERATIONAL. 


REFERENCES: 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-758 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  857 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY : 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/3  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ 


C [ ] 


LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A121R  J4-8B;  55V76A122R  J3-127B 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  KEEL  WEB  HTR  SYSTEM  STILL  OPERATIONAL. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-759 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

858 


ITEM: 

FAILURE  MODE: 


RESISTOR,  1.2K  2W 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  1 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 

REDUNDANCY  SCREENS: 

LOCATION:  AV  BAY  4 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

, PCA  1;  AV 

BAY  5,  PCA  2 

^USES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 

PROPELLANTS  AT  DESIRED  TEMPERATURES  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO.  -c  ruK  r-wiKX 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549 

28  JUNE’85;  JSC  20923  PCN-1;  73A760210  REV  A 


15  OCT'82, 


LTR 


REPORT  DATE  02/04/87 


C-760 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  859 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 
LANDING/ SAFING 

3/3 
; 3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY 

4,  PCA  1;  AV 

BAY 

5,  PCA  2 

PART  NUMBER;  54V76A121R  J8-118B;  55V76A122R  J3-101B 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURES  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-761 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  860 

ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 

HDW/FUNC  ABORT  HDW/FUNC 

3/3  RTLS:  3/3 

3/3  TAL:  3/3 

3/3  AOA:  3/3 

3/3  ATO:  3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ ] C [ 

LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A121R  J8-118A;  55V76A122R  J3-101A 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK. 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE : 

NONE,  KEEL  WEB  HTR  SYSTEM  STILL  OPERATIONAL. 


REFERENCES; 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-762 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  861 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM;  RESISTOR,  1.2K  2W 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING 

; 3/3 

REDUNDANCY  SCREENS; 

A [ 

] 

B [ 

] 

c [ ] 

LOCATION:  AV  BAY 

4,  PCA 

1;  AV 

BAY  5, 

PCA  2 

PART  NUMBER:  54V76A121R  J8-118B;  55V76A122R  J3-101B 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  KEEL  WEB  HTR  SYSTEM  STILL  OPERATIONAL. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE*85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-763 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/16/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  OMS  FLIGHT;  3/2R 

MDAC  ID;  862  ABORT;  3/3 

ITEM;  RESISTOR,  1.2K  2W 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER;  55V76A122R  J4-8A;  56V76A123R  J4-8A 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURES  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-764 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  863 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122R  J4-8B,*  56V76A123R  J4-8B 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURES  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-765 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  864 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT:  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2 ) POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FXJNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO; 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ ] i 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER;  55V76A122R  J4-8A;  56V76A123R  J4-8A 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK, 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE ; 

NONE,  KEEL  WEB  HTR  SYSTEM  STILL  OPERATIONAL. 


REFERENCES; 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-766 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  865 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  5,  LCA  2;  AV  BAY  6,  LCA  3 

PART  NUMBER:  55V76A122R  J4-8B;  56V76A123R  J4-8B 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  KEEL  WEB  HTR  SYSTEM  STILL  OPERATIONAL. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-767 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  866 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

8) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 


PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

C P ] 

C [ P 

LOCATION:  AV  BAY  6, 

LCA  3; 

AV  BAY 

4,  LCA  1 

PART  NUMBER:  56V76A123R  J3-101A;  54V76A121R  J3-101A 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURES  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-768 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM;  OMS 
MDAC  ID:  867 


ITEM;  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B 

[ P ] 

C [ P ] 

LOCATION:  AV  BAY 

6,  LCA  3; 

AV  BAY 

4,  LCA  1 

PART  NUMBER;  56V76A123R  J3-113B;  54V76A121R  J3-113B 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE; 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPELLANTS  AT  DESIRED  TEMPERATURES  AND  WOULD  BE  CAUSE  FOR  ENTRY 
ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-769 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  868 


ITEM;  RESISTOR,  1.2K  2W 

FAILURE  MODE;  FAILS  SHORT 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL; 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ ] C [ 

LOCATION;  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

PART  NUMBER;  56V76A123R  J3-101A;  54V76A121R  J3-101A 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE; 

NONE,  KEEL  WEB  HTR  SYSTEM  STILL  OPERATIONAL. 


REFERENCES; 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-770 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  869 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  KEEL  WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS; 

LIFTOFF;  3/3  TAL; 

ONORBIT;  3/3  AOA: 

DEORBIT;  3/3  ATO: 

LANDING/ SAFING;  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] B [ 


C [ ] 


LOCATION:  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

PART  NUMBER:  56V76A123R  J3-113B;  54V76A121R  J3-113B 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  KEEL  WEB  HTR  SYSTEM  STILL  OPERATIONAL. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-771 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/16/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT; 

3/2R 

MDAC  ID: 

870 

ABORT: 

3/3 

ITEM: 

RESISTOR,  1.2K  2W 

FAILURE  MODE 

::  FAILS  OPEN 

LEAD  ANALYST 

V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  RCS  HOUSING  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/S AFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] C [ 

LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER;  54V76A121R  J3-127A;  55V76A122R  J3-113A 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  DOES  NOT  RESULT  IN  LOSS  OF  ANY  HTR  GROUP.  SECOND 
FAILURE  RESULTS  IN  LOSS  OF  GROUP  1 HTRS,  GROUP  2 STILL  FULLY 
OPERATIONAL. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE*85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-772 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  871  ABORT:  3/3 

ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  RCS  HOUSING  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A121R  J3-127A;  55V76A122R  J3-113A 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ISOLATION  RESISTANCE,  ALL  HTR  GROUPS  STILL 
OPERATIONAL. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-773 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/16/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM: 

OMS 

FLIGHT: 

3/2R 

MDAC  ID: 

872 

ABORT; 

3/3 

ITEM: 

RESISTOR,  1.2K  2W 

FAILURE  MODE 

;:  FAILS  OPEN 

LEAD  ANALYST 

';  V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  RCS  HOUSING  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

REDUNDANCY  SCREENS; 

LOCATION;  AV  BAY  4 

PART  NUMBER;  54V76A12 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

, PCA  1;  AV 

BAY  5,  PCA  2 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  DOES  NOT  RESULT  IN 
FAILURE  RESULTS  IN  LOSS  OF  GROUP 
OPERATIONAL. 


LOSS  OF  ANY  HTR  GROUP.  SECOND 
1 HTRS,  GROUP  2 STILL  FULLY 


LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-774 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  873 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  RCS  HOUSING  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

A [ ] 

B [ ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A121R  J3-127B;  55V76A122R  J3-112B 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ISOLATION  RESISTANCE,  ALL  HTR  GROUPS  STILL 
OPERATIONAL. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-775 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/2R 
3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  RCS  HOUSING  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 3 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6 

, LCA  3;  AV 

BAY  4,  LCA  1 

PART  NUMBER:  56V76A123R  J3-113A; 

54V76A121R  J3 

-113A 

DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/16/87 

OMS 

874 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


ITEM: 

FAILURE  MODE: 


RESISTOR,  1.2K  2W 
FAILS  OPEN 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK. 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE : 

FIRST  FAILURE  DOES  NOT  RESULT  IN  LOSS  OF  ANY  HTR  GROUP.  SECOND 
FAILURE  RESULTS  IN  LOSS  OF  GROUP  2 HTRS,  GROUP  1 STILL  FULLY 
OPERATIONAL. 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES: 
28  JUNE'85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-776 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/16/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/2R 

MDAC  ID:  875  ABORT:  3/3 

ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  RCS  HOUSING  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

PART  NUMBER:  56V76A123R  J3-113B;  54V76A121R  J3-113B 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  DOES  NOT  RESULT  IN  LOSS  OF  ANY  HTR  GROUP.  SECOND 
FAILURE  RESULTS  IN  LOSS  OF  GROUP  2 HTRS,  GROUP  1 STILL  FULLY 
OPERAT TONAL • 

LOSS  OF  ALL  REDUNDANCY  WOULD  RESULT  IN  INABILITY  TO  MAINTAIN 
PROPER  THERMAL  CONTROL  IN  THE  RCS  HOUSING  AND  WOULD  BE  CAUSE  FOR 
ENTRY  ON  NEXT  DAILY  GO/NO-GO. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-777 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID;  876 


ITEM;  RESISTOR,  1.2K  2W 

FAILURE  MODE;  FAILS  SHORT 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/3 

3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  RCS  HOUSING  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/S AFING ; 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO; 

3/3 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ 

LOCATION;  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

PART  NUMBER;  56V76A123R  J3-113A;  54V76A121R  J3-113A 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  LOSS  OF  ISOLATION  RESISTANCE,  ALL  HTR  GROUPS  STILL 
OPERATIONAL. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-778 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  877 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W,  LT/RT  RCS  HOUSING  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  6,  LCA  3;  AV  BAY  4,  LCA  1 

PART  NUMBER:  56V76A123R  J3-113B;  54V76A121R  J3-113B 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  LOSS  OF  ISOLATION  RESISTANCE,  ALL  HTR  GROUPS  STILL 
OPERATIONAL. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-779 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/16/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM:  OMS 

FLIGHT: 

3/3 

MDAC  ID:  878 

ABORT: 

3/3 

ITEM: 

RESISTOR,  5. IK  1/4W 

FAILURE  MODE: 

FAILS  OPEN 

LEAD  ANALYST: 

V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  5. IK  1/4W,  LT/RT  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER:  54V76A131A1R35;  55V76A132A1R6 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  SWITCH  TALKBACK,  SWITCH  POSITION  CAN  BE  INDIRECTLY 
DETERMINED  BY  MONITORING  GROUP  1 HTR  OPERATION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-780 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  879 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  5. IK  1/4W,  LT/RT  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS;  A [ ] B [ ] C [ ] 

LOCATION:  AV  BAY  4,  PCA  1;  AV  BAY  5,  PCA  2 

PART  NUMBER;  54V76A131A1R35;  55V76A132A1R6 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-781 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/16/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT; 

3/3 

MDAC  ID: 

880 

ABORT: 

3/3 

ITEM: 

RESISTOR,  5. IK 

1/4W 

FAILURE  MODE 

I:  FAILS  OPEN 

LEAD  ANALYST 

':  V.J.  BURKEMPER 

SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  5. IK  1/4W,  LT/RT  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO; 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ 

LOCATION:  AV  BAY  6,  PCA  3;  AV  BAY  4,  PCA  1 

PART  NUMBER:  56V76A133A1R10;  54V76A131A1R39 


CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSE  SWITCH  TALKBACK,  SWITCH  POSITION  CAN  BE  INDIRECTLY 
DETERMINED  BY  MONITORING  GROUP  2 HTR  OPERATION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-782 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/16/87 

SUBSYSTEM:  OMS 

MDAC  ID:  881 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  5. IK  1/4W,  LT/RT  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  6,  PCA  3;  AV  BAY  4,  PCA  1 

PART  NUMBER:  56V76A133A1R10;  54V76A131A1R39 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-783 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/12/86 

SUBSYSTEM;  OMS 
MDAC  ID:  882 

ITEM:  SENSOR  TEMPERATURE,  COVER  THERMO.  TEMP 

FAILURE  MODE;  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 

TOLERANCE) 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POO 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  COVER  THERMO.  TEMP 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS: 

LIFTOFF; 

3/3 

TAL: 

ONORBIT; 

3/3 

AOA: 

DEORBIT; 

3/3 

ATO: 

LANDING/ SAFING; 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION:  OME  COVER 

PART  NUMBER:  51V43TT419,  52V43TT519 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  LOSE  DIRECT  TEMP  MEASUREMENT  FOR  OME  COVER  HTR  SYSTEM. 
ALTHOUGH  VALIDITY  OF  THE  MEASUREMENT  (SENSOR  FAILURE)  MIGHT  NOT 
BE  IMMEDIATELY  DETERMINED  A THERMOSTAT  FAILURE  "OFF"  IS 
CONSIDERED  FAIL  OPERATIONAL  FOR  THE  SYSTEM  AND  A THERMOSTAT 
FAILURE  "ON"  CAN  BE  DETERMINED  BY  MONITORING  THE  OX  ENG  INLET 
TEMP  MEASUREMENT  V43T4216A/V43T5216A. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-784 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

883 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  3/3 


ITEM:  SENSOR  TEMPERATURE,  ENG  SERVICE  PNL 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  ENG  SERVICE  PNL 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION;  ENGINE  SERVICE  PANEL 

PART  NUMBER:  51V43TT412,  52V43TT512 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  LOSE  DIRECT  TEMP  MEASUREMENT  FOR  THE  OME  SERVICE  PANEL  HTR 
SYSTEM.  ALTHOUGH  VALIDITY  OF  MEASUREMENT  (SENSOR  FAILURE)  MIGHT 
NOT  BE  IMMEDIATELY  DETERMINED  A THERMOSTAT  FAILURE  "OFF”  IS 
CONSIDERED  FAIL  OPERATIONAL  AND  A THERMOSTAT  FAILURE  "ON”  CAN  BE 
DETERMINED  BY  MONITORING  FU  FEED  LN  TEMP  V43T4642A/V43T5642A  AND 
OX  INLET  TEMP  V43T4216A/V43T5216A. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  3;  JSC 

18549,  820CT,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-785 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

884 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  SENSOR  TEMPERATURE,  GSE  SERVICE  PNL 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS -OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  GSE  SERVICE  PNL 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION:  GSE  SERVICE  PANEL 

PART  NUMBER:  51V43TT411,  51V43TT511 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  LOSE  DIRECT  TEMP  MEASUREMENT  FOR  THE  GSE  SER  PNL  HTR 
SYSTEM.  ALTHOUGH  VALIDITY  OF  MEASUREMENT  MIGHT  NOT  BE 
IMMEDIATELY  DETERMINED,  A THERMOSTAT  FAILURE,  EITHER  "ON"  OR 
"OFF"  RESULTS  IN  A FAIL  OPERATIONAL  CONDITION  FOR  THIS  HTR 
SYSTEM. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73B760210  REV  E;  JSC 

18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-786 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

885 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  SENSOR  TEMPERATURE,  LEFT/RIGHT  SKIN  TEMP  38 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  LEFT/RIGHT  SKIN  TEMP  38 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  POD  SKIN 

PART  NUMBER:  51V09TT420,  52V09TT520 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

51V09TT420  & 52V09TT520  IS  PART  OF  THE  MADS  SYSTEM  AND  THEREFORE 
NOT  A PART  OF  THIS  ANALYSIS  (NOT  USED  DURING  ANY  FLIGHT  PHASE). 


REFERENCES:  VS70-943099  REV  A EO  B12;  73B760210  REV  E;  JSC 

18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-787 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

886 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  SENSOR  TEMPERATURE,  OMS  ENG  COMPT  B.H.S.  (POD 

BASE)  ^ 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  OMS  ENG  COMPT  B.H.S.  (POD  BASE) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 

HDW/FUNC  ABORT  HDW/FUNC 

3/3  RTLS:  3/3 

3/3  TAL:  3/3 

3/3  AOA:  3/3 

3/3  ATO:  3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ ] C [ 

LOCATION:  ENGINE  COMPARTMENT,  (B.H.S.  POD  BASE) 

PART  NUMBER:  51V43MTT418,  52V43TT518 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  PROVIDES  A NONCRITICAL  MEASUREMENT 


REFERENCES:  VS70-943099  REV  A EO  B12;  73B760210  REV  E;  JSC 

18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-788 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  11/12/86 

SUBSYSTEM:  OMS 

MDAC  ID;  887 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM*  SENSOR  TEMPERATURE,  OX  DRAIN  PNL  ^EMP  1 & TEMP  2 
FAILURE  MODE;  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 
TOLERANCE) 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


breakdown  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM  „„„„ 

4)  SENSOR  TEMPERATURE,  OX  DRAIN  PNL  TEMP  1 & TEMP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/3 

3/3 


RTLS: 

TAL; 

AOA: 

ATO; 


LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS;  A [ ] 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION;  OXIDIZER  DRAIN  P7UIEL  - 

PART  NUMBER:  51V43TT409,  51V43TT410,  52V43TT509,  52V43TT510 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

effects/^tiona^  can  be  determined  by 

MVASUREMENT  LOSS  OF  ALL  REDUNDANCY  COULD  LEAD  TO  INCORRECTLY 
“fS  -^‘iN^^D  y4eB  HTR  system  AND  SWITCHING  TO  REDUNDANT 
HTR  GROUP  BEFORE  SENSOR  FAILURE  IS  DETERMINED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73B760210  REV  3;  JSC 
18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-789 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

888 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


SENSOR  TEMPERATURE,  RCS  HSG  VERNIER  COMP  TEMP  2 
ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  RCS  HSG  VERNIER  COMP  TEMP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING ; 

REDUNDANCY  SCREENS; 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 
PART  NUMBER; 


RCS  HSG  VERNIER  THRUSTER  PNL 
51V43TT402,  52V43TT502 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

DETERMINED  FIRST  BY  MONITORING  REDUNDANT 
V43T4701A(51V43TT414)/V43T5701A(52V43TT514)  AND 

^GED  SENSOR  MEASUREMENT 

REDUNDANCY  WORST  CASE  WOULD  BE 

DETEM!INED^°  REDUNDANT  HTR  SYSTEM  BEFORE  SENSOR  FAILURE  COULD  BE 


REFERENCES:  VS70-943009  REV  A EO 

18549,  820CT,  LTR  JUNE  85 


B12;  73A760210  REV 


E; 


JSC 


REPORT  DATE  02/04/87 


C-790 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/12/86 

SUBSYSTEM:  OMS 

MDAC  ID:  889 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  SENSOR  TEMPERATURE,  RCS  HSG  VERNIER  COMPT  TEMP  1 
FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 
TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  RCS  HSG  VERNIER  COMPT  TEMP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B C ] 

c [ ] 

LOCATION:  RCS  HSG  VERNIER  THRUSTER  PNL 

PART  NUMBER:  51V43TT414,  52V43TT514 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  FAILURE  CAN  BE  DETERMINED  FIRST  BY  MONITORING  REDUNDANT 
MEASUREMENT  V43T4711A(51V43TT402)/V43T5711A(52V43TT502)  AND 
SECOND  BY  MONITORING  THE  RATE  AT  WHICH  THE  SENSOR  MEASUREMENT 
CHANGED.  FOR  LOSS  OF  ALL  REDUNDANCY  WORST  CASE  WOULD  BE 
SWITCHING  TO  REDUNDANT  HTR  SYSTEM  BEFORE  SENSOR  FAILURE  COULD  BE 
DETERMINED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-791 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  11/12/86 

SUBSYSTEM:  OMS 

MDAC  ID:  890 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  SENSOR  TEMPERATURE,  RCS  PRESS  PNL  SPRT  TEMP  1 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS -OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  RCS  PRESS  PNL  SPRT  TEMP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS: 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION:  RCS  OX  PRESS  PNL 

PART  NUMBER:  51V43TT413,  52V43TT513 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE,  FAILURE  CAN  BE  DETERMINED  FIRST  BY  MONITORING  REDUNDANT 
MEASUREMENT  V43T4710A  (51V43TT4103)/V43T5710A(52V43TT5103)  AND 
SECOND  BY  MONITORING  THE  RATE  AT  WHICH  THE  SENSOR  MEASUREMENT 
CHANGED.  FOR  LOSS  OF  ALL  REDUNDANCY  THE  STATUS  OF  THE  KEEL  WEB 
HTR  SYSTEM  OPERATION  CAN  BE  INDIRECTLY  DETERMINED  BY  MONITORING 
PROPELLANT  TEMPERATURES. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  3;  JSC 

18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-792 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM; 
MDAC  ID; 


11/12/86 

OMS 

891 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM:  SENSOR  TEMPERATURE,  RCS  PRESS  PNL  SPRT  TEMP  2 

FAILURE  MODE;  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 
TOLERANCE) 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  RCS  PRESS  PNL  SPRT  TEMP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING 
REDUNDANCY  SCREENS: 

; 3/3 

A [ ] B 

[ ] 

c [ ] 

LOCATION;  RCS  OX  PRESS  PNL 

PART  NUMBER;  51V43TT403,  52V43TT503 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

NONE,  FAILURE  CAN  BE  DETERMINED  FIRST  BY  MONITORING  REDUNDANT 
MEASUREMENT  V43T4700A  (51V43TT413)/V43T5700A(52V43TT513)  AND 
SECOND  BY  MONITORING  THE  RATE  AT  WHICH  THE  SENSOR  MEASUREMENT 
CHANGED.  FOR  LOSS  OF  ALL  REDUNDANCY  THE  STATUS  OF  THE  KEEL  WEB 
HTR  SYSTEM  OPERATION  CAN  BE  INDIRECTLY  DETERMINED  BY  MONITORING 
PROPELLANT  TEMPERATURES. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549, 820CT,LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-793 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


11/12/86 

OMS 

892 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


SENSOR  TEMPERATURE,  UPPER  Y-WEB  INBD 
ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
POD 

THERMAL  CONTROL  SUBSYSTEM 
SENSOR  TEMPERATURE,  UPPER  Y-WEB  INBD 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 

REDUNDANCY  SCREENS; 


CRITICALITIES 


DW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

[ ] 

B [ ] 

c [ ] 

LOCATION; 
PART  NUMBER: 


UPPER  Y-WEB,  INBOARD 
51V43TT416,  52V43TT516 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NONE.  LOSE  DIRECT  TEMP  MEASUREMENT  FOR  THE  INBD  Y-WEB  HTR 

measurement  (SENSOR  FAILURE) 
IMMEDIATELY  DETERMINED  A THERMOSTAT  FAILURE  "OFF”  IS 
CONSIDERED  FAIL  OPERATIONAL  AND  A THERMOSTAT  FAILED  "ON"  CAN  BE 
DETERMINED  BY  MONITORING  THE  UPPER  ODTBD  Y-VreB™  MP 
V43T4702A/V43T5702A. 


^FERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-794 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  11/12/86  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  893  ABORT:  3/3 

ITEM:  SENSOR  TEMPERATURE,  UPPER  Y-WEB  OUTBD 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPENED,  FAILS-OUT-OF- 

TOLERANCE) 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SENSOR  TEMPERATURE,  UPPER 

5) 

6) 

7) 

8) 

9) 


Y-WEB  OUTBD 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  UPPER  Y-WEB,  OUTBOARD 

PART  NUMBER:  51V43TT415,  51V43TT515 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  LOSE  DIRECT  TEMP  MEASUREMENT  FOR  THE  OUTBD  Y-WEB  HTR 
SYSTEM.  ALTHOUGH  VALIDITY  OF  THE  MEASUREMENT  (SENSOR  FAILURE) 
MIGHT  NOT  BE  IMMEDIATELY  DETERMINED  A THERMOSTAT  FAILURE  "OFF"  IS 
CONSIDERED  FAIL  OPERATIONAL  AND  A THERMOSTAT  FAILURE  "ON"  CAN  BE 
DETERMINED  BY  MONITORING  THE  UPPER  INBD  Y-WEB  TEMP 
V43T4703A/V43T5703A. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  820CT,  LTR  JUNE  85 


REPORT  DATE  02/04/87 


C-795 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  894 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


THERMAL  SWITCH,  LT/RT  GSE  SERVICE  PNL  GROUP  1 
FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

ELECTRICAL  COMPONENTS 

2) 

POD 

3) 

THERMAL 

CONTROL 

SUBSYSTEM 

4) 

THERMAL 

SWITCH, 

LT/RT  GSE 

5) 

6) 

7) 

8) 

9) 

SERVICE  PNL  GROUP  1 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  GSE  SERVICE  PANEL 

PART  NUMBER:  51V43S43;  52V43S44 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  FAILED  OFF  CONDITION  FOR  GSE  SEVICE  PANEL  HTR  SYSTEM. 
THE  GSE  SERVICE  PNL  HTR  SYSTEM  IS  NOT  A CRITICAL  HTR  SYSTEM. 
REMAINING  HTR  SYSTEMS  MAINTAIN  THERMAL  ENVIRONMENT  WITHIN 
REDLINES . 

LOSS  OF  ALL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  MISSION  DUE  TO 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-796 


C-  lO 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  895 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

3/3 


ITEM:  THERMAL  SWITCH,  LT/RT  GSE  SERVICE  PNL  GROUP  1 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  GSE 

5) 

6) 

7) 

8) 

9) 


SERVICE  PNL  GROUP  1 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

2/lR 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  GSE  SERVICE  PANEL 

PART  NUMBER:  51V43S43;  52V43S44 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-797 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  896 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


THERMAL  SWITCH,  LT/RT  GSE  SERVICE  PNL  GROUP  2 
FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 


1) 

ELECTRICAL  COMPONENTS 

2) 

POD 

3) 

THERMAL 

CONTROL 

SUBSYSTEM 

4) 

THERMAL 

SWITCH, 

LT/RT  GSE 

5) 

6) 

7) 

8) 

9) 

SERVICE  PNL  GROUP  2 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/ SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  GSE  SERVICE  PANEL 

PART  NUMBER;  51V43S51;  52V43S52 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

RESULTS  IN  FAILED  OFF  CONDITION  FOR  GSE  SEVICE  PANEL  HTR  SYSTEM. 
THE  GSE  SERVICE  PNL  HTR  SYSTEM  IS  NOT  A CRITICAL  HTR  SYSTEM. 
REMAINING  HTR  SYSTEMS  MAINTAIN  THERMAL  ENVIRONMENT  WITHIN 
REDLINES . 

LOSS  OF  ALL  REDUNDANCY  WILL  RESULT  IN  LOSS  OF  MISSION  DUE  TO 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-798 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID;  897 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  3/3 


ITEM;  THERMAL  SWITCH,  LT/RT  GSE  SERVICE  PNL  GROUP  2 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  GSE 

5) 

6) 

7) 

8) 

9) 


SERVICE  PNL  GROUP  2 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL; 

ONORBIT: 

2/lR 

AOA: 

DEORBIT: 

3/3 

ATO; 

LANDING/SAFING; 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 


LOCATION;  GSE  SERVICE  PANEL 

PART  NUMBER;  51V43S51;  52V43S52 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON”  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8”  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7”  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-799 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  898 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  THERMAL  SWITCH,  LT/RT  KEEL  WEB  HEATER  SYSTEM  GROUP 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  KEEL  WEB  HEATER  SYSTEM  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  KEEL  WEB 

PART  NUMBER:  51V43S21 

; 52V43S22 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 


FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  FAILURE  OF  THE  KEEL  WEB  HTR 
SYSTEM  AND  IS  CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO-GO  IF  THE 
ENVIRONMENT  CANNOT  MAINTAIN  THERMAL  REDLINES. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


JSC 


REPORT  DATE  02/04/87 


C-800 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  899 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


item:  thermal  switch,  LT/RT  keel  web  heater  system  GROUP 

1 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  KEEL  WEB  HEATER  SYSTEM  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B C P ] 

C [ P ] 

LOCATION:  KEEL  WEB 

PART  NUMBER:  51V43S21;  52V43S22 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE:  „«„.i 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  ON 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON”  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1”  BY  7”  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85?  JSC  20923  PCN-1?  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-801 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID;  900 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM; 

2 

FAIU7RE  MODE: 


THERMAL  SWITCH,  LT/RT  KEEL  WEB  HEATER  SYSTEM  GROUP 
FAILS  OPEN 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  KEEL  WEB  HEATER  SYSTEM  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS; 

TAL; 

AOA: 

ATO; 


REDUNDANCY  SCREENS;  A [ 2 ] 

LOCATION;  KEEL  WEB 

PART  NUMBER;  51V43S23;  52V43S24 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

REDUNDANCY  RESULTS  IN  FAILURE  OF  THE  KEEL  WEB  HTR 
SYSTEM  AND  IS  CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO-GO  IF  THE 
ENVIRONMENT  CANNOT  MAINTAIN  THERMAL  REDLINES. 


REFERENCES: 
18549,  OCT  82 


VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
, LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-802 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID;  901 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  3/3 


item;  thermal  switch,  lt/rt  keel  web  heater  system  group 

2 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  KEEL  WEB  HEATER  SYSTEM  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

2/lR 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  KEEL  WEB 

PART  NUMBER;  51V43S23;  52V43S24 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE;  

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  ON 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON”  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-803 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID:  902 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  THERMAL  SWITCH,  LT/RT  LOWER  INBOARD  Y WEB  GROUP  1 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  LOWER  INBOARD  Y WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/3 

ATO: 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

LOCATION;  LOWER  INBOARD  Y-WEB 

PART  NUMBER;  51V43S33; 

52V43S34 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  LOWER  INBOARD  Y-WEB  HTR 

SYSTEM.  RE-ENTRY  COULD  BE  REQUIRED  IF  THERMAL  LIMITS  CANNOT  BE 
MAINTAINED . 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E; 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


JSC 


REPORT  DATE  02/04/87 


C-804 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/19/87 

OMS 

903 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


THERMAL  SWITCH,  LT/RT  LOWER  INBOARD  Y WEB  GROUP  1 
FAILS  SHORT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  LOWER  INBOARD  Y WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  LOWER  INBOARD  Y-WEB 

PART  NUMBER:  51V43S33?  52V43S34 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  ON 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON”  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1”  BY  7”  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-805 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  904 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


THERMAL  SWITCH,  LT/RT  LOWER  INBOARD  Y WEB  GROUP  2 
FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  LOWER  INBOARD  Y WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: * 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO* 

LANDING/SAFING:  3/3 


REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  LOWER  INBOARD  Y-WEB 

PART  NUMBER:  51V43S35;  52V43S36 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

REDUNDANCY  RESULTS  IN  LOSS  OF  LOWER  INBOARD  Y-WEB  HTR 
COULD  BE  REQUIRED  IF  THERMAL  LIMITS  CANNOT  BE 

MAINTAINED • 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REV  E;  JSC 


REPORT  DATE  02/04/87 


C-806 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  905 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


ITEM:  THERMAL  SWITCH,  LT/RT  LOWER  INBOARD  Y WEB  GROUP  2 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  LOWER  INBOARD  Y WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  2/lR  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


LOCATION:  LOWER  INBOARD  Y-WEB 

PART  NUMBER:  51V43S35;  52V43S36 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE:  „ 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  ON 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7”  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-807 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID:  906 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/3 


ITEM:  THERMAL  SWITCH,  LT/RT  OME  COMPT  GROUP  1 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  OME  COMPT  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS 

: 3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  OME  COMPARTMENT 

PART  NUMBER:  51V43S37 

; 51V43S38 

CAUSES:  CONTAMINATION 

, VIBRATION, 

PIECE  PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME 
COMPARTMENT  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT 
LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-808 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/19/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  2/lR 

MDAC  ID:  907  ABORT:  3/3 

ITEM:  THERMAL  SWITCH,  LT/RT  OME  COMPT  GROUP  1 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  OME 

5) 

6) 

7) 

8) 

9) 


COMPT  GROUP 


1 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  OME  COMPARTMENT 

PART  NUMBER:  51V43S37;  51V43S38 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : .. 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  ON 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8”  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1”  BY  7”  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-809 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM;  OMS 
HDAC  ID:  908 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM;  THERMAL  SWITCH,  LT/RT  OME  COMPT  GROUP  2 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 


1) 

ELECTRICAL  COMPONENTS 

2) 

POD 

3) 

THERMAL 

CONTROL 

SUBSYSTEM 

4) 

THERMAL 

SWITCH, 

LT/RT  OME 

5) 

6) 

7) 

8) 

9) 

COMPT  GROUP  2 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL; 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/3 

ATO; 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 

LOCATION;  OME  COMPARTMENT 
PART  NUMBER;  51V43S39;  51V43S40 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME 
COMPARTMENT  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT 
LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN 
INABILITY  TO  MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-810 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/19/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  2/lR 

MDAC  ID;  909  ABORT:  3/3 

ITEM:  THERMAL  SWITCH,  LT/RT  OME  COMPT  GROUP  2 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  OME  COMPT  GROUP 

5) 

6) 

7) 

8) 

9) 


2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 3 

B [ P ] 

C [ P ] 

LOCATION:  OME  COMPARTMENT 

PART  NUMBER;  51V43S39;  51V43S40 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR*S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO, 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-811 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  910 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  THERMAL  SWITCH,  LT/RT  OME  COVER  GROUP  1 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  OME  COVER  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION:  OME  COVER 

PART  NUMBER:  51V43S53;  51V43S54 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME  COVER  HTR 
SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E; 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


JSC 


REPORT  DATE  02/04/87 


C-812 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

1/19/87 

HIGHEST  CRITICALITY 

HDW/FUNC 

SUBSYSTEM; 

OMS 

FLIGHT: 

2/lR 

MDAC  ID; 

911 

ABORT; 

3/3 

ITEM; 

THERMAL  SWITCH, 

LT/RT  OME  COVER  GROUP  1 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  OME  COVER  GROUP  1 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

2/lR 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  OME  COVER 

PART  NUMBER;  51V43S53;  51V43S54 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAIUJRE,  OVERLOAD 
EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-813 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  912 


HIGHEST  CRITICALITY  HDW/FUNC 


FLIGHT: 

ABORT: 


3/2R 

3/3 


ITEM:  THERMAL  SWITCH,  LT/RT  OME  COVER  GROUP  2 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  OME  COVER  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  OME  COVER 

PART  NUMBER:  51V43S55;  51V43S56 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  OME  COVER  HTR 
SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-814 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/19/87 

OMS 

913 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


THERMAL  SWITCH,  LT/RT  OME  COVER  GROUP  2 
FAILS  SHORT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  OME 

5) 

6) 

7) 

8) 

9) 


COVER  GROUP  2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  OME  COVER 

PART  NUMBER:  51V43S55;  51V43S56 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE:  ..^rTi. 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  ON 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4”  BY  8”  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-815 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  914 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  THERMAL  SWITCH,  LT/RT  RCS  HOUSING  GROUP  1 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  RCS  HOUSING  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] C [ 

LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43S47,  51V42S41;  52V43S47,  52V42S41 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

A FAILURE  OF  ALL  REDUNDANCY  RESULTS  IN  FAILURE  OF  THE  RCS  HOUSING 
HTR  SYSTEM  AND  IS  CAUSE  FOR  ENTRY  ON  NEXT  DAILY  GO/NO— GO  IF  THE 
ENVIRONMENT  EXCEEDS  THERMAL  REDLINES. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-816 


DATE: 

SUBSYSTEM; 
MDAC  ID: 

ITEM: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/19/87 

OMS 

915 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT;  3/3 


FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.  J.  BURKEMPER 


THERMAL  SWITCH,  LT/RT  RCS  HOUSING  GROUP  1 

SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  RCS  HOUSING  GROUP 

5) 

6) 

7) 

8) 

9) 


1 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH;  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT;  2/lR  AOA; 

DEORBIT;  3/3  ATO; 

LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43S47,  51V42S41;  52V43S47,  52V42S41 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


effects /rationale I 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR*S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL 
598-E242-808  23FEB78 


E;  JSC 
MEMO  NO. 


REPORT  DATE  02/04/87 


C-817 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/2R 
3/3 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2 ) POO 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  RCS  HOUSING  GROUP  2 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM; 
MOAC  ID: 


1/19/87 

OMS 

916 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


ITEM: 

FAILURE  MODE: 


THERMAL  SWITCH,  LT/RT  RCS  HOUSING  GROUP  2 
FAILS  OPEN 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING ; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] C [ 

LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43S45,  51V42S49;  52V43S45,  52V42S49 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

^ OF  ALL  REDUNDANCY  RESULTS  IN  FAILURE  OF  THE  RCS  HOUSING 

entry  on  next  daily  go/no-go  if  raf 

ENVIRONMENT  EXCEEDS  THERMAL  REDLINES. 


REFERENCES:  VS70-943099 

18549,  OCT  82,  LTR  JUNE 


REV  A EO  B12;  73A760210  REV  E;  JSC 
85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-818 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  917 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


item:  thermal  switch,  lt/rt  rcs  housing  group  2 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  RCS 

5) 

6) 

7) 

8) 

9) 


HOUSING  GROUP 


2 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  RCS  HOUSING 

PART  NUMBER:  51V43S45,  51V42S49;  52V43S45,  52V42S49 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE; 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON' 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-819 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  918 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  THERMAL  SWITCH,  LT/RT  UPPER  INBOARD  Y-WEB  GROUP  1 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  UPPER  INBOARD  Y-WEB  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  UPPER  INBOARD  Y WEB 

PART  NUMBER:  51V43S31;  51V43S32 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  UPPER  INBOARD 
Y-WEB  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES: 
18549,  OCT  82 


VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
, LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-820 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID;  919 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/lR 

ABORT;  3/3 


ITEM;  THERMAL  SWITCH,  LT/RT  UPPER  INBOARD  Y-WEB  GROUP  1 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST;  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  UPPER  INBOARD  Y-WEB 

5) 

6) 

7) 

8) 

9) 


GROUP  1 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

2/lR 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING ; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  UPPER  INBOARD  Y WEB 

PART  NUMBER;  51V43S31;  51V43S32 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


TTITVECTS  /T?  • 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  'THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES;  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 
185497  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-821 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  920 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


THERMAL  SWITCH,  LT/RT  UPPER  INBOARD  Y-WEB  GROUP  2 
FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  UPPER  INBOARD  Y-WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  UPPER  INBOARD  Y WEB 

PART  NUMBER:  51V43S29;  51V43S30 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

^ POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  UPPER  INBOARD 
Y-WEB  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDWDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  ^^NAML^Y  tS 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099 

18549,  OCT  82,  LTR  JUNE 


REV  A EO  B12;  73A760210  REV  E;  JSC 
85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-822 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/19/87 

OMS 

921 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


ITEM; 

FAILURE  MODE: 


THERMAL  SWITCH,  LT/RT  UPPER  INBOARD  Y-WEB  GROUP  2 
FAILS  SHORT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  UPPER  INBOARD  Y-WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF: 

3/3 

TAL; 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  UPPER  INBOARD  Y WEB 

PART  NUMBER:  51V43S29;  51V43S30 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON" 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/ LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-823 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/19/87 

OMS 

922 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


THERMAL  SWITCH,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  1 
FAILS  OPEN 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  1 

5) 

6) 

7) 

8) 

5) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  UPPER  OUTBOARD  Y-WEB 

PART  NUMBER:  51V43S27;  51V43S28 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

RESULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  UPPER  OUTBOARD 
Y-WEB  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE,  BUT  LOSS  OF  ALL 
REDUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-824 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  923 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/lR 

ABORT:  3/3 


ITEM:  THERMAL  SWITCH,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  1 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.  J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  1 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

2/lR 

3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LANDING/ SAFING:  3/3 

REDUNDANCY  SCREENS:  A[2]  B[P]  C[P] 

LOCATION:  UPPER  OUTBOARD  Y-WEB 

PART  NUMBER:  51V43S27;  51V43S28 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE: 

FIRST  FAILXJRE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  ON 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON”  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATU^ 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSI^E 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1”  BY  7”  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-825 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/19/87 

SUBSYSTEM;  OMS 
MDAC  ID;  924 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM; 

FAILURE  MODE; 


THERMAL  SWITCH,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  2 
FAILS  OPEN 


LEAD  ANALYST;  V.  J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS; 

TAL; 

AOA; 

ATO; 


REDUNDANCY  SCREENS;  A [ 2 ] 

LOCATION;  UPPER  OUTBOARD  Y-WEB 

PART  NUMBER;  51V43S25;  51V43S26 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

^SULTS  IN  A POSSIBLE  FAILED  OFF  CONDITION  FOR  THE  UPPER  OUTROAPn 
Y-TOB  HTR  SYSTEM.  REDUNDANT  HTR  GROUP  AVAILABLE?  BUT  Sss  Sf^L 
^DUNDANCY  RESULTS  IN  LOSS  OF  MISSION  DUE  TO  AN  INABILITY  TO 
MAINTAIN  PROPER  POD  THERMAL  ENVIRONMENT. 


REFERENCES; 
18549,  OCT  82 


VS70-943099  REV  A EO  B12;  73A760210  REV  E; 
, LTR  JUNE  85;  JSC  20923  PCN- 


REPORT  DATE  02/04/87 


C-826 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/19/87 

SUBSYSTEM:  OMS 

MDAC  ID:  925 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

3/3 


ITEM:  THERMAL  SWITCH,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  2 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.  J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  THERMAL  SWITCH,  LT/RT  UPPER  OUTBOARD  Y WEB  GROUP  2 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  UPPER  OUTBOARD  Y-WEB 

PART  NUMBER:  51V43S25;  51V43S26 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  THE  ASSOCIATED  HTR  SET  BEING  FAILED  "ON” 
WHICH  COULD  RESULT  IN  A HIGHER  THAN  DESIRED  TEMP  IN  POD.  A 
SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WOULD  RESULT  IN  BOTH 
ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON"  SIMULTANEOUSLY  WHEN  THE 
REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING  IN  A TEMPERATURE 
EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF  425F  AND  POSSIBLE 
LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE.  TESTS  HAVE  SHOWN 
THAT  A 4"  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON  WILL  HAVE  A MAX 
TEMP  OF  552  F AND  A 1"  BY  7"  lOW  HTR  WILL  HAVE  A MAX  TEMP  OF  615 
F UNDER  SAME  CONDITIONS. 

REFERENCES:  VS70-943099  REV  A EO  B12;  73A760210  REV  E;  JSC 

18549,  OCT  82,  LTR  JUNE  85;  JSC  20923  PCN-1;  MDAC-STL  MEMO  NO. 
598-E242-808  23FEB78 


REPORT  DATE  02/04/87 


C-827 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/21/87 

SUBSYSTEM;  OMS 
MDAC  ID;  926 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

2/lR 

3/3 


ITEM;  SWITCH,  TOGGLE  RCS/OMS  HEATER  LT/RT  POD  GROUPl 

FAILURE  MODE;  FAILS  TO  SWITCH  (STUCK  IN  ON  POSITION) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SWITCH  TOGGLE,  RCS/OMS  HEATER  LT/RT  POD  GROUP  1 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

2/lR 

3/3 

3/3 


ABORT 

RTLS: 

TAL; 

AOA: 

ATO; 


REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


LOCATION;  PNL  14 

PART  NUMBER;  36V73A14-S1  ; 36V73A14-S4 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

LOSE  ABILITY  TO  REMOVE  POWER  TO  PART  OF  GROUP  1 HTR  SYSTEM.  NO 
EFFECT  UNLESS  A SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WHICH  WOULD 
RESULT  IN  BOTH  ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON” 

SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING 
IN  A TEMPERATURE  EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF 
425  F AND  POSSIBLE  LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE. 
TESTS  HAVE  SHOWN  THAT  A 4”  BY  8"  47W  HTR  WITH  BOTH  ELEMENTS  ON 
WILL  HAVE  A MAX  TEMP  OF  552  F AND  A 1”  BY  7"  lOW  HTR  WILL  HAVE  A 
MAX  TEMP  OF  615  F UNDER  SAME  CONDITIONS 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT*82,  LTR 
28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-828 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/21/87 

SUBSYSTEM:  OMS 

MDAC  ID:  927 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

2/lR 

3/3 


ITEM:  SWITCH,  TOGGLE  RCS/OMS  HEATER  LT/RT  POD  GROUP  2 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  ON  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SWITCH  TOGGLE,  RCS/OMS  HEATER 

5) 

6) 

7) 

8) 

9) 


LT/RT  POD  GROUP  2 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/lR 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  14 

PART  NUMBER:  36V73A14-S2  ,*  36V73A14-S5 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  REMOVE  POWER  TO  PART  OF  GROUP  1 HTR  SYSTEM.  NO 
EFFECT  UNLESS  A SECOND  FAILURE  IN  THE  SAME  HTR  GROUP  WHICH  WOULD 
RESULT  IN  BOTH  ELEMENTS  OF  TWO  OR  MORE  HTR'S  "ON" 

SIMULTANEOUSLY  WHEN  THE  REDUNDANT  HTR  GROUP  IS  ACTIVE  RESULTING 
IN  A TEMPERATURE  EXCEEDING  THE  POD  STRUCTURAL  QUALIFIED  LIMIT  OF 
425  F AND  POSSIBLE  LOSS  OF  VEHICLE/LIFE  DUE  TO  STRUCTURAL  DAMAGE. 
TESTS  HAVE  SHOWN  THAT  A 4”  BY  8”  47W  HTR  WITH  BOTH  ELEMENTS  ON 
WILL  HAVE  A MAX  TEMP  OF  552  F AND  A 1”  BY  7"  lOW  HTR  WILL  HAVE  A 
MAX  TEMP  OF  615  F UNDER  SAME  CONDITIONS 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-829 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/21/87 

SUBSYSTEM;  OMS 
MDAC  ID;  928 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM; 

FAILURE  MODE; 


SWITCH,  TOGGLE,  RCS/OMS  HEATER  LT/RT  POD  GROUP  1 
FAILS  TO  SWITCH  (STUCK  IN  THE  OFF  POSITION) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SWITCH  TOGGLE,  RCS/OMS  HEATER  LT/RT  POD  GROUP  1 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS; 

TAL; 

AOA; 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

c t P ] 

LOCATION;  PNL  14 

PART  NUMBER;  36V73A14-S1  ; 36V73A14-S4 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  GROUP  1 HTR'S,  GROUP  2 STILL 

OPERATIONAL.  LOSS  OF  ALL  REDUNDANCY  (2ND  FAILURE)  RESULTS 
IN  LOSS  OF  MISSION  DUE  TO  INABILITY  TO  MAINTAIN  POD  THERMAL 
ENVIRONMENT. 


REFERENCES; 
28  JUNE*85; 


VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82, 
JSC  20923  PCN-1;  73A760210  REV  A 


LTR 


REPORT  DATE  02/04/87 


C-830 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/21/87 

SUBSYSTEM:  OMS 

MDAC  ID;  929 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM;  SWITCH,  TOGGLE,  RCS/OMS  HEATER  LT/RT  POD  GROUP  2 

FAILURE  MODE;  FAILS  TO  SWITCH  (STUCK  IN  THE  OFF  POSITION) 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  POD 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SWITCH  TOGGLE,  RCS/OMS  HEATER  LT/RT  POD  GROUP  2 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/3 

ATO; 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 


LOCATION;  PNL  14 

PART  NUMBER;  36V73A14-S2  ; 36V73A14-S5 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

FIRST  FAILURE  RESULTS  IN  LOSS  OF  GROUP  1 HTR'S,  GROUP  2 STILL 
FULLY  OPERATIONAL.  LOSS  OF  ALL  REDUNDANCY  (2ND  FAILURE)  RESULTS 
IN  LOSS  OF  MISSION  DUE  TO  INABILITY  TO  MAINTAIN  POD  THERMAL 
ENVIRONMENT. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549  15  OCT'82,  LTR 

28  JUNE'85;  JSC  20923  PCN-1;  73A760210  REV  A 


REPORT  DATE  02/04/87 


C-831 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  930 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

LOCATION:  AV  BAY  4 

, LCA  1 

PART  NUMBER:  54V76A121AR  J6-PP 

TYPE  III 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES: 
JUNE  85 


VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 


REPORT  DATE  02/04/87 


C-832 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/05/87 

SUBSYSTEM;  OMS 
MDAC  ID;  931 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID  - 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING 

; 3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY 

4,  LCA  1 

PART  NUMBER;  54V76A121AR  J6-PP  TYPE  III 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE: 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  UTILIZE  THE 
CONTROL  TEMP  THERMOSTAT.  THE  OVER  TEMP  THERMOSTAT  STILL 
AVAILABLE  TO  MAINTAIN  SAFE  HTR  OPERATION. 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 
RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS 
OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR'S 
FAILED  "ON”  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 
REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
"ON”  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 
JUNE  85 


REPORT  DATE  02/04/87 


C-833 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  932 

ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/3 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS; 

LIFTOFF;  3/3  TAL: * 

ONORBIT:  3/2R  AOA; 

DEORBIT:  3/3  ATO: 

LANDING/SAFING;  3/3 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 

LOCATION;  AV  BAY  4,  LCA  1 

PART  NUMBER;  54V76A121AR  J6-MM  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82.  LTR 

.TTTXTT7  O C ^ ' 


REPORT  DATE  02/04/87 


C-834 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/05/87 

SUBSYSTEM;  OMS 
MDAC  ID;  933 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 


1) 

ELECTRICAL  COMPONENTS 

2) 

CROSSFEED 

3) 

THERMAL  CONTROL  SUBSYSTEM 

4) 

DRIVER,  HYBRID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH; 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL; 

ONORBIT; 

3/2R 

AOA; 

DEORBIT; 

3/3 

ATO; 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION;  AV  BAY  4,  LCA  1 

PART  NUMBER;  54V76A121AR  J6-MM  TYPE  III 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  UTILIZE  THE 
CONTROL  TEMP  THERMOSTAT.  THE  OVER  TEMP  THERMOSTAT  STILL 
AVAILABLE  TO  MAINTAIN  SAFE  HTR  OPERATION. 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 
RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS 
OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR'S 
FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 
REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
"ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 

REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 
JUNE  85 


REPORT  DATE  02/04/87 


C-835 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/05/87 

OMS 

934 


HIGHEST  CRITICALITY  HDW/FUNC 


ITEM: 

FAILURE  MODE: 


DRIVER,  HYBRID 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


FLIGHT: 

ABORT: 


SUBSYS  LEAD:  D.J.  PAUL 


3/2R 

3/3 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSS FEED 

THERMAL  CONTROL  SUBSYSTEM 
DRIVER,  HYBRID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  4 

, LCA  1 

PART  NUMBER:  54V76A121AR  J6--NN  TYPE  III 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES: 
JUNE  85 


VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 


REPORT  DATE  02/04/87 


C-836 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID;  935 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  4,  LCA  1 

PART  NUMBER;  54V76A121AR  J6-NN  TYPE  III 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  UTILIZE  THE 
CONTROL  TEMP  THERMOSTAT.  THE  OVER  TEMP  THERMOSTAT  STILL 
AVAILABLE  TO  MAINTAIN  SAFE  HTR  OPERATION. 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 
RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS 
OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR'S 
FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 
REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
"ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-837 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/05/87 

OMS 

936 


ITEM: 

FAILURE  MODE: 


DRIVER,  HYBRID 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 
DRIVER,  HYBRID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 

LIFTOFF: 

ONORBIT: 

DEORBIT: 

LANDING/S AFING: 

REDUNDANCY  SCREENS: 

LOCATION:  AV  BAY  5 

PART  NUMBER:  55V76A12 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY  LOSS  OF 

SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 ] 
, LCA  2 

B [ P ] 

C [ P ] 

REFERENCES: 
JUNE  85 


VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 


REPORT  DATE  02/04/87 


C-838 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM;  OMS 
MDAC  ID:  937 


ITEM;  DRIVER,  HYBRID 

FAILURE  MODE;  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/SAFING 

REDUNDANCY  SCREENS; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS: 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AV  BAY  5,  LCA  2 

PART  NUMBER;  55V76A122AR  J6-PP  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  UTILIZE  THE 
CONTROL  TEMP  THERMOSTAT.  THE  OVER  TEMP  THERMOSTAT  STILL 
AVAILABLE  TO  MAINTAIN  SAFE  HTR  OPERATION. 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 
RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS 
OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR*S 
FAILED  "ON''  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 
REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
"ON”  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-839 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


1/05/87 

OMS 

938 


ITEM: 

FAILURE  MODE; 


DRIVER,  HYBRID 
FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT:  3/3 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSS FEED 

THERMAL  CONTROL  SUBSYSTEM 
DRIVER,  HYBRID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 

FLIGHT  PHASE 
PRELAUNCH; 

LIFTOFF; 

ONORBIT; 

DEORBIT: 

LANDING/SAFING: 

REDUNDANCY  SCREENS; 

LOCATION;  AV  BAY  5 

PART  NUMBER:  55V76A122AR  J6-H*  TYPE  III 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL; 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ 2 ] 
, LCA  2 

B [ P ] 

C [ P ] 

REFERENCES: 
JUNE  85 


VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 


REPORT  DATE  02/04/87 


C-840 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  939 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [.  2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

5,  LCA  2 

PART  NUMBER:  55V76A122AR  J6-H'  TYPE  III 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE;  

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  UTILIZE  THE 
CONTROL  TEMP  THERMOSTAT.  THE  OVERTEMP  THERMOSTAT  STILL  AVAILABLE 
TO  MAINTAIN  SAFE  HTR  OPERATION. 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 
RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS 
OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR  S 
FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 
REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
"ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-841 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/05/87 

OMS 

940 


ITEM: 

FAILURE  MODE: 


DRIVER,  HYBRID 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSS FEED 

THERMAL  CONTROL  SUBSYSTEM 
DRIVER,  HYBRID 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

REDUNDANCY  SCREENS: 


LOCATION: 
PART  NUMBER; 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 ] 
, LCA  2 

B [ P ] 

C [ P ] 

55V76A122AR  J6-EE  TYPE  III 
CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 

CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
ENGINE  OR  PROP  FAILURES,  AND  LOSS 
BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES: 
JUNE  85 


VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 


REPORT  DATE  02/04/87 


C-842 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  941 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  DRIVER,  HYBRID 

FAILURE  MODE:  FAILS  HIGH 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  DRIVER,  HYBRID 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

5,  LCA  2 

PART  NUMBER:  55V76A122AR  J6-EE  TYPE  III 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  AN  INABILITY  TO  UTILIZE  THE 
CONTROL  TEMP  THERMOSTAT.  THE  OVERTEMP  THERMOSTAT  STILL  AVAILABLE 
TO  MAINTAIN  SAFE  HTR  OPERATION. 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 
RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS 
OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR'S 
FAILED  "ON”  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 
REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
"ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-843 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/05/87 

OMS 

942 


ITEM: 

FAILURE  MODE: 


FUSE,  lOA 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 
FUSE,  lOA 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 


LOCATION: 
PART  NUMBER; 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 ] 
, PCA  2 

B [ P ] 

C [ P ] 

55V76A132F28 


MOCK^’OVERLO^^^^^^*^*^'  SHOCK,  THERMAL 

EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

TTTKTr'  OC  ' 


REPORT  DATE  02/04/87 


C-844 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  943 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL; 

3/2R 

AOA: 

3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION;  AV  BAY  5,  PCA  2 

PART  NUMBER:  55V76A132F23 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE:  

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-845 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/05/87 

OMS 

944 


ITEM: 

FAILURE  MODE: 


FUSE,  lOA 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 
FUSE,  lOA 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] 


B [ ] 


C [ ] 


LOCATION: 
PART  NUMBER: 


AV  BAY  4,  PCA  1 
54V76A131F25 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE ; 

NO  EFFECT,  PBK  CIRCUITRY  NOT  USED  SINCE  PBK  DOES  NOT  EXIST. 


REFERENCES:  VS70-943099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-846 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  945 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

4,  PCA  1 

PART  NUMBER:  54V76A131F26 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE;  

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DDE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDtJNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12 ; JSC  18549,  OCT  82,  LTR 

JtJNE  85 


REPORT  DATE  02/04/87 


C-847 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  946 


ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSS FEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lOA 

5) 

6) 

7) 

S) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY  4,  PCA  1 

PART  NUMBER;  54V76A131F30 

CAUSES:  CONTAMINATION,  VIBRATION, 

SHOCK,  OVERLOAD 


MECHANICAL  SHOCK,  THERMAL 


EFFECTS/RATIONALE ; 

REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
capability,  loss  of  engine  redundancy,  loss  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES; 
JUNE  85 


VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 


REPORT  DATE  02/04/87 


C-848 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  947 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  FUSE,  lOA 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 


1) 

ELECTRICAL  COMPONENTS 

2) 

CROSSFEED 

3) 

THERMAL  CONTROL  SUBSYSTEM 

4) 

FUSE,  lOA 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL: 

ONORBIT; 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING ; 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C C ] 


LOCATION:  AV  BAY  5,  PCA  2 

PART  NUMBER:  55V76A132F22 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NOT  ENOUGH  INFORMATION  ON  PBK  CIRCUITRY. 


REFERENCES;  VS 70 -9 43099  REV  A EO  B12 


REPORT  DATE  02/04/87 


C-849 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  948 


ITEM:  FUSE,  lA 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 


1) 

ELECTRICAL  COMPONENTS 

2) 

CROSS FEED 

3) 

THERMAL  CONTROL 

SUBSYSTEM 

4) 

FUSE,  lA 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

LOCATION:  PNL  A14,  S8 

PART  NUMBER:  36V73A14F26 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82.  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-850 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  949 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  FUSE,  lA 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  lA 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  A14, 

S7 

PART  NUMBER:  36V73A14F25 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE: 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-851 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  950 


ITEM:  FUSE,  20A 

FAILURE  MODE;  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUSE,  20A 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF: 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY  4 

, PCA  1 

PART  NUMBER;  54V76A131F24 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82  LTR 

TTTVTT*  OCr 


REPORT  DATE  02/04/87 


C-852 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


1/05/87 

OMS 

951 


ITEM; 

FAILURE  MODE: 


FUSE,  20A 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 
FUSE,  20A 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING; 

REDUNDANCY  SCREENS: 


CRITICALITIES 


LOCATION: 
PART  NUMBER: 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

i,  LCA  2 

55V76A132F21 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE;  ^ 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/ XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-853 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

1/18/87  HIGHEST  CRITICALITY  HDW/FUNC 

QMS  FLIGHT:  3/2R 

952  ABORT:  3/3 

FUEL  AND  OXIDIZER  LOWER  CENTER  FEED  LINE  fXFEED) 
HEATER  ELEMENT  (A/B) 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  CENTER  FEED  LINE  (XFEED)  HEATER 
ELEMENT  (A/B) 

5) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

ITEM: 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 

3/3 

ATO: 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ 2 ] B [ F ] 


C [ P ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  50V43HR1051;  HR1052;  HR1053;  HR1054 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF”  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN. 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED  CAPABILITY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-854 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  953 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUEL  AND  OXIDIZER  LOWER  CENTER  FEED  LINE  (XFEED) 

HEATER  ELEMENT  (A/B) 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  CENTER  FEED  LINE  (XFEED)  HEATER 
ELEMENT  (A/B) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43HR1051;  HR1052;  HR1053;  HR1054 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F) . THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  «OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN. 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-855 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  954 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  FUEL  AND  OXIDIZER  LOWER  LEFT  FEED  LINE  (XFEED) 

HEATER  ELEMENT  (A/B) 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  LEFT  FEED  LINE  (XFEED)  HEATER  ELEMENT 
(A/B) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ F ] 

C [ P ] 

LOCATION;  AFT  BODY 

PART  NUMBER;  50V43HR1031;  HR1032;  HR1033;  HR1034 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN. 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-856 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  955 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUEL  AND  OXIDIZER  LOWER  LEFT  FEED  LINE  (XFEED) 

HEATER  ELEMENT  (A/B) 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  LEFT  FEED  LINE  (XFEED)  HEATER  ELEMENT 
(A/B) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  AFT  BODY 

PART  NUMBER;  50V43HR1031;  HR1032;  HR1033;  HR1034 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN. 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-857 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  956 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUEL  AND  OXIDIZER  LOWER  RIGHT  FEED  LINE  (XFEED) 

HEATER  ELEMENT  (A/B) 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  RIGHT  FEED  LINE  (XFEED)  HEATER  ELEMENT 
(A/B) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43HR1041;  HR1042;  HR1043;  HR1044 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF”  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN. 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-858 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

1/18/87  HIGHEST  CRITICALITY  HDW/FUNC 

OMS  FLIGHT;  3/2R 

957  ABORT:  3/3 

FUEL  AND  OXIDIZER  LOWER  RIGHT  FEED  LINE  (XFEED) 
HEATER  ELEMENT  (A/B) 

FAILURE  MODE;  FAILS  SHORT 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  RIGHT  FEED  LINE  (XFEED)  HEATER  ELEMENT 
(A/B) 

5) 

6) 

7) 

8) 

9) 


DATE; 

SUBSYSTEM; 
MDAC  ID: 

ITEM; 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO; 

3/3 

REDUNDANCY  SCREENS;  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION;  AFT  BODY 

PART  NUMBER;  50V43HR1041;  HR1042;  HR1043;  HR1044 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN. 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES;  VS70-943099  REV  A EO  B12 ; JSC-18549  150CT82,  LTR 
28JXJNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-859 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  958 

ITEM:  FUEL  HI  PT  BLEED 

FAILURE  MODE:  FAILS  OPEN 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 

LINE  HEATER  ELEMENT  (A/B) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  HI  PT  BLEED  LINE  HEATER  ELEMENT  (A/B) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS: 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING : 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] B [ 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43HR1100 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-860 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/18/87 

OMS 

959 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


FUEL  HI  PT  BLEED  LINE  HEATER  ELEMENT  (A/B) 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 

FUEL  HI  PT  BLEED  LINE  HEATER  ELEMENT  (A/B) 


2) 

3) 

4) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 
PART  NUMBER: 


AFT  BODY 
50V43HR1100 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-861 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  960 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM: 

FAILURE  MODE: 


FUEL  HI  PT  BLEED  LINE  T-4  UMB  HEATER  (A/B) 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  HI  PT  BLEED  LINE  T-4  UMB  HEATER  (A/B) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/3 

AOA: 

DEORBIT: 

LANDING/SAFING: 

3/3 

3/3 

ATO: 

HDW/FXmC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 


B [ ] C [ ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  40V43HR1120;  HR1122 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 

CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-862 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  961 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


FUEL  HI  PT  BLEED  LINE  T-4  UMB  HEATER  (A/B) 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  HI  PT  BLEED  LINE  T-4 

5) 

6) 

7) 

8) 

9) 


UMB  HEATER  (A/B) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AO  A: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS:  A 

[ ] 

B C ] 

c [ ] 

LOCATION;  AFT  BODY 

PART  NUMBER:  40V43HR1120;  HR1122 

CAUSES:  CONTAMINATION, 

VIBRATION, 

PIECE  PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-863 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  962 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  L FUEL  AND  OXIDIZER  LO  PT  DRAIN  LINE  HEATER 

ELEMENT  (A/B) 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  L FUEL  AND  OXIDIZER  LO  PT  DRAIN  LINE  HEATER  ELEMENT  (A/B) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL; 

ONORBIT; 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS;  A 

[ ] B [ 

] 

LOCATION:  AFT  BODY 

PART  NUMBER;  50V43HR1141;  HR1142 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-864 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  963 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


L FUEL  AND  OXIDIZER  LO  PT  DRAIN  LINE  HEATER 

ELEMENT  (A/B) 

failure  MODE:  FAILS  SHORT 

lead  analyst:  V.J.  BURKEMPER  SUBSYS  lead:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  electrical  components 

2)  CROSSFEED 

l\  ASroTlDll^ER drain  LINE  HEATER  EI^MENT  (A/B) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


HDW/FUNC 
3/3 
3/3 
3/3 
3/3 


CRITICALITIES 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


B [ ] 


C [ ] 


LANDING/SAFING;  3/3 

REDUNDANCY  SCREENS;  A [ ] 

LOCATION;  AFT  BODY 

PART  NUMBER:  50V43HR1141;  HR1142 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

in^dete^nS^^iticalities  J2^^®^“|ossf^™S's°we 

htr  system  is  not  mission  critical,  crossfeed  can  SIXXjXj 

ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-865 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID;  964 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM; 

(A/B) 

FAILURE  MODE; 


LEFT  FUEL  AND  OXIDIZER  FLEX  LINE  HEATER  ELEMENTS 
FAILS  OPEN 


lead  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  LEFT  FUEL  AND  OXIDIZER  FLEX  LINE  HEATER  ELEMENTS  (A/B) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/2R 

3/3 

3/3 


RTLS; 

TAL; 

AOA: 

ATO; 


REDUNDANCY  SCREENS;  A [ 3 ] 

LOCATION;  AFT  BODY 

PART  NUMBER;  50V43HR1011;  HR1012 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


causes:  contamination,  vibration,  piece  part  failure,  overload 
EFFECTS/RATIONALE : 

take^pSce*^if\emSrSures^on^the^  ^ launch  would  not 

outside  Ls?5Id“S  ^<5™f 

CROSSFEED  CAPABILITIES  FOR  ABORTS  ENSURE 

result  in  LOSS  OF  ASSOCIATES  OTR  GRonp^^  FAILURE  COULD 

REDUNDANCY  WOULD  RESULT  IN  A TITl^S  .Voppm  0^  ^LL 

CRITICAL  CROSSFEED  LN.  FAILED  OFF  HTR  SYSTEM  ON  A MISSION 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED  CAPABILITY 


REFERENCES;  VS70-943099 
28JUNE85;  JSC  20923  PCN-1 


REV  A EO  B12; 


JSC-18549  150CT82, 


LTR 


REPORT  DATE  02/04/87 


C-866 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  965 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  left  fuel  AND  OXIDIZER  FLEX  LINE  HEATER  ELEMENTS 

(A/B) 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  LEFT  FUEL  AND  OXIDIZER  FLEX  LINE  HEATER  ELEMENTS 

5) 

6) 

7) 

8) 

9) 


(A/B) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43HR1011;  HR1012 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF”  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN. 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-867 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  966 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  OXIDIZER  HI  PT  BLEED  LINE  HEATER  ELEMENT  fA/B) 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  HI  PT  BLEED  LINE  HEATER  ELEMENT  (A/B) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT; 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43HR1110 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [.  ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN’S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12 ; JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-868 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  967 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  OXIDIZER  HI  PT  BLEED  LINE  HEATER  ELEMENT  (A/B) 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  HI  PT  BLEED  LINE 

5) 

6) 

7) 

8) 

9) 


HEATER  ELEMENT  (A/B) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43HR1110 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-869 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  968 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


ITEM:  OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB  HEATER  (A/B) 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB  HEATER  (A/B) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA: 

3/3 

3/3 

ATO: 

3/3 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ 


C [ ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  40V43HR1130;  HR1132 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F),  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-870 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  969 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB  HEATER  (A/B) 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
2}  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB  HEATER  (A/B) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ . ] 

B [ ] 

c [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  40V43HR1130;  HR1132 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-871 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID;  970 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/3 

3/3 


ITEM;  R FUEL  AND  OXIDIZER  LO  PT  DRAIN  LINE  HEATER 

ELEMENT  (A/B) 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
2}  CROSS FEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  R FUEL  AND  OXIDIZER  LO  PT  DRAIN  LINE  HEATER  ELEMENT  (A/B) 

5) 

6) 

7) 

B) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/ SAFING : 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL; 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER;  50V43HR1151;  HR1152 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDAIIT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-872 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  971 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  R FUEL  AND  OXIDIZER  LO  PT  DRAIN  LINE  HEATER 

ELEMENT  (A/B) 

FAILURE  MODE:  FAILS  SHORT 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
2}  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  R FUEL  AND  OXIDIZER  LO  PT  DRAIN  LINE  HEATER  ELEMENT  (A/B) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A [ ] B [ ] C [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43HR1151;  HR1152 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F) . THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-873 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  972 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

(A/B) 

FAIUJRE  MODE: 


RIGHT  FUEL  AND  OXIDIZER  FLEX  LINE  HEATER  ELEMENTS 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RIGHT  FUEL  AND  OXIDIZER  FLEX  LINE  HEATER  ELEMENTS 

5) 

6) 

7) 

8) 

9) 


(A/B) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING; 
REDUNDANCY  SCREENS: 

3/3 

A [ 3 ] 

B [ F ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43HR1021;  HR1022 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN. 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-874 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  973 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  RIGHT  FUEL  AND  OXIDIZER  FLEX  LINE  HEATER  ELEMENTS 

(A/B) 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RIGHT  FUEL  AND  OXIDIZER  FLEX  LINE  HEATER 

5) 

6) 

7) 

8) 

9) 


ELEMENTS  (A/B) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAF ING : 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER;  50V43HR1021;  HR1022 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN. 

LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-875 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

1/05/87 

OMS 

974 

HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 

HDW/FUNC 

3/2R 

3/3 

ITEM: 

RELAY 

FAILURE  MODE:  FAILS  HIGH 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RELAY 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5 

, PCA  2 

PART  NUMBER:  55V76A132K3 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  TURN  OFF  "B"  XFEED  HTR  SYSTEM.  CONTROL 
THERMOSTATS  WILL  MAINTAIN  PROPER  THERMAL  ENVIROMINT.  SECOND 
FAILURE  IN  REDUNDANT  SYSTEM  RESULTS  IN  BOTH  "A”  & "B”  XFEED  HTR 
SYSTEMS  STUCK  IN  AUTO  MODE. 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 
RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF 
ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR'S 
FAILED  "ON”  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 
REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
"ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82.  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-876 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/05/87 

OMS 

975 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RELAY 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING 

: 3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY 

5,  PCA  2 

PART  NUMBER:  55V76A132K3 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


LOSS^F^^L^REDuSdANCY  is  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-877 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  976 


ITEM:  RELAY 

FAILURE  MODE:  FAILS  HIGH 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RELAY 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF; 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 3 

B [ P 3 

LOCATION:  AV  BAY  4 

, PCA  1 

PART  NUMBER:  54V76A131K2 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ F ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

MSE  ABILITY  TO  TURN  OFF  "A"  XFEED  HTR  SYSTEM.  CONTROL 

WILL  MAINTAIN  PROPER  THERMAL  ENVIROMINT.  SECOND 
FAILURE  IN  REDUNDANT  SYSTEM  RESULTS  IN  BOTH  "A"  & "B”  XFEED  HTR 
SYSTEMS  STUCK  IN  AUTO  MODE.  ^ « u hik 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 
RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF 
ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR'S 
FAILED  "ON”  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 
R^^ONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
•ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-878 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  977 

ITEM:  RELAY 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RELAY 

5) 

6) 

7) 

8) 

9) 


HIGHEST  CRITICALITY  HDW/FUNC 

M ^ 


FLIGHT: 

ABORT: 


SUBSYS  LEAD:  D.J.  PAUL 


3/2R 

3/3 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 
3/3 
3/2R 
3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


B [ P ] 


C [ P ] 


LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  AV  BAY  4,  PCA  1 

PART  NUMBER:  54V76A131K2 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

mS“f''“l^redSSdancy  is  possible  loss  of  “II 

INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  ^DUND^CY,  LOSS 
protection  against  subsequent  engine  or  prop  failures,  and  LOS 
” TO  L^CE  PROP  WEIGHTS  BETWEEH  PODS  IF  PREVIOUS 

FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-879 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  978 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] 

LOCATION:  AV  BAY  4,  LCA  1 

PART  NUMBER:  54V76A121  J8-38 


CAUSES:  CONTAMINATION, 

SHOCK,  OVERLOAD 


VIBRATION,  MECHANICAL  SHOCK, 


THERMAL 


EFFECTS/RATIONALE : 

NONE,  XFEED  THERMAL  CONTROL  STILL  AVAILABLE. 


REFERENCES: 
JUNE  85 


VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 


REPORT  DATE  02/04/87 


C-880 


DATE; 

SUBSYSTEM: 
MDAC  ID; 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/05/87 

OMS 

979 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 


ITEM;  RESISTOR,  1.2K  2W 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V. J.  BURKEMPER  SUBSYS  LEAD;  D. J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING 

HDW/FUNC 
3/3 
3/3 
3/2R 
3/3 
: 3/3 

ABORT 

RTLS; 

TAL; 

AOA: 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION;  AV  BAY  4,  LCA  1 

PART  NUMBER;  54V76A121  J8-38 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE;  

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-881 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


1/05/87 

OMS 

980 


HIGHEST  CRITICALITY  HDW/FUNC 


ITEM: 

FAILURE  MODE: 


RESISTOR,  1.2K  2W 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


FLIGHT: 

ABORT: 


SUBSYS  LEAD:  D.J.  PAUL 


3/2R 

3/3 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 
RESISTOR,  1.2K  2W 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 

REDUNDANCY  SCREENS; 


CRITICALITIES 


LOCATION: 
PART  NUMBER; 


54V76A121  J8-35 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ 2 ] 
, LCA  1 

B [ P ] 

C [ P ] 

^OCK^*OVERIOM^^^^^°*^'  mechanical  SHOCK,  THERMAL 

EFFECTS/RATIONALE ; 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY  LOSS  OF 

SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES: 
JUNE  85 


VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 


REPORT  DATE  02/04/87 


C-882 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  981 


ITEM;  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST;  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 


HDW/FtJNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL; 

AOA: 

ATO; 


REDUNDANCY  SCREENS: 


A [ ] 


B C ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION;  AV  BAY  4,  LCA  1 

PART  NUMBER;  54V76A121  J8-35 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE,  XFEED  THERMAL  CONTROL  STILL  AVAILABLE. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 
JUNE  85 


REPORT  DATE  02/04/87 


C-883 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  982 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT; 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/ SAFING ; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

LOCATION:  AV  BAY  5, 

LCA  2 

PART  NUMBER;  55V76A122 

J8-38 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C t P ] 


CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERI^AD 


EFFECTS/RATIONALE : 

NONE,  XFEED  THERMAL  CONTROL  STILL  AVAILABLE. 


REFERENCES: 
JUNE  85 


VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 


REPORT  DATE  02/04/87 


C-884 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  983 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 
REDUNDANCY  SCREENS: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AV  BAY  5,  LCA  2 

PART  NUMBER:  55V76A122  J8-38 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-885 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  984 

ITEM:  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 

PRELAUNCH:  3/3  RTLS: 

LIFTOFF:  3/3  TAL: 

ONORBIT:  3/2R  AOA: 

DEORBIT:  3/3  ATO: 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS;  A [ 2 ] B [ P ] 

LOCATION:  AV  BAY  5,  LCA  2 

PART  NUMBER;  55V76A122  J8-35 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 

EFFECTS/RATIONALE : 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 
JUNE  85 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P 3 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/3 


REPORT  DATE  02/04/87 


C-886 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID;  985 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM;  RESISTOR,  1.2K  2W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  1.2K  2W 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ S AFING ; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION;  AV  BAY  5,  LCA  2 

PART  NUMBER;  55V76A122  J8-35 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE ; 

NONE,  XFEED  THERMAL  CONTROL  STILL  AVAILABLE. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 
JUNE  85 


REPORT  DATE  02/04/87 


C-887 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  986 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM:  RESISTOR,  5. IK  1/4W 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  5. IK  1/4W 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


CRITICALITIES 

HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO; 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  5,  PCA  2 

PART  NUMBER:  55V76A132A1R18 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK 

SHOCK,  OVERLOAD 


THERMAL 


EFFECTS/RATIONALE : 

pjSE  SWITCH  TALKBACK.  SWITCH  POSITION  CAN  BE  DETERMINED  BY 
MONITORING  HTR  OPERATION  WITH  REDUNDANT  SYSTEM  TURNED  OFF. 


REFERENCES: 
JUNE  85 


VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 


REPORT  DATE  02/04/87 


C-888 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  987 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  5. IK  1/4W 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AV  BAY  5,  PCA  2 

PART  NUMBER:  55V76A132A1R18 

CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-889 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/05/87 

OMS 

988 


ITEM: 

FAILURE  MODE: 


RESISTOR,  5. IK  1/4W 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


HIGHEST  CRITICALITY  HDW/FXHIC 
FLIGHT:  3/3 

ABORT:  3/3 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 
RESISTOR,  5. IK  1/4W 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] 


LOCATION: 
PART  NUMBER: 


AV  BAY  4,  PCA  1 
54V76A131A1R16 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


CAUSES:  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 

SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  SWITCH  TALKBACK.  SWITCH  POSITION  CAN  BE  DETERMINED  BY 
MONITORING  HTR  OPERATION  WITH  REDUNDANT  SYSTEM  TURNED  OFF. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85 


REPORT  DATE  02/04/87 


C-890 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/05/87 

SUBSYSTEM;  OMS 
MDAC  ID;  989 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM;  RESISTOR,  5.  IK  1/4W 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RESISTOR,  5. IK  1/4W 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/S AFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION;  AV  BAY  4,  PCA  1 

PART  NUMBER;  54V76A131A1R16 

CAUSES;  CONTAMINATION,  VIBRATION,  MECHANICAL  SHOCK,  THERMAL 
SHOCK,  OVERLOAD 


EFFECTS/RATIONALE : 

NONE  SWITCH  TALKBACK  STILL  AVAILABLE  TO  GPC. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 
JUNE  85 


REPORT  DATE  02/04/87 


C-891 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/17/87 

SUBSYSTEM:  OMS 

MDAC  ID:  990 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/3 

3/3 


^TEM:  aft  FUSLG  fuel  HI  PT  BLEED  LINE  TEMP  SENSOR 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS-OUT-OF- 

TOLERANCE) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  AFT  FUSLG  FUEL  HI  PT  BLEED  LINE  TEMP  SENSOR 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43MT11 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

IN  DETERMINING  THE  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  WITH  A SENSOR  INDICATING  CROSSFEED  TEMPERATURES 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  FIRST 
UNDERSTANDING  IT  WAS  A SENSOR  FAILURE  AND  SECOND  EXCEPTING  THE 
RISKS  OF  LOSS  OF  DETECTABLITY  FOR  THE  THERMAL  SYSTEM.  (THIS 
ENSURES  XFEED  FOR  ABORTS))  EFFECT:  LOSE  FAILURE  DETECTION  OF 
ASSOCIATED  HTR  SYSTEM.  HTR  SYSTEM  IS  NOT  MISSION  CRITICAL. 
CROSSFEED  CAN  STILL  BE  ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,  REV  C 

DCN-5;  JSC-18549  15  OCT'82,  LTR  28  JUNE*85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-892 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  \/ll/Bl 

SUBSYSTEM;  OMS 
MDAC  ID;  991 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM;  AFT  FUSLG  OXIDIZER  HI  PT  BLEED  LINE  TEMP  SENSOR 

FAILURE  MODE;  ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS-OUT-OF- 
TOLERANCE) 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  AFT  FUSLG  OXIDIZER  HI  PT  BLEED  LINE  TEMP 

5) 

6) 

7) 

8) 

9) 


SENSOR 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/3 

AOA; 

3/3 

DEORBIT; 

3/3 

ATO; 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS ; A 

[ ] 

B [ ] 

c [ ] 

LOCATION;  AFT  BODY 

PART  NUMBER;  50V43MT12 

CAUSES;  CONTAMINATION, 

VIBRATION, 

PIECE  PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE;  

IN  DETERMINING  THE  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  WITH  A SENSOR  INDICATING  CROSSFEED  TEMPERATURES 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  FIRST 
UNDERSTANDING  IT  WAS  A SENSOR  FAILURE  AND  SECOND  EXCEPTING  THE 
RISKS  OF  LOSS  OF  DETECTABLITY  FOR  THE  THERMAL  SYSTEM.  (THIS 
ENSURES  XFEED  FOR  ABORTS))  EFFECT;  LOSE  FAILURE  DETECTION  OF 
ASSOCIATED  HTR  SYSTEM.  HTR  SYSTEM  IS  NOT  MISSION  CRITICAL, 
CROSSFEED  CAN  STILL  BE  ACCOMPLISHED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,  REV  C 
DCN-5;  JSC-18549  15  OCT'82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-893 


C'-^  / 1 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/17/87 

SUBSYSTEM;  OMS 
MDAC  ID;  992 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  3/3 


^TEM;  BHD  FUEL  HI  PT  BLEED  LINE  TEMP  SENSOR 

FAILURE  MODE;  ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS-OUT-OF- 

TOLERANCE) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  BHD  FUEL  HI  PT  BLEED  LINE  TEMP  SENSOR 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE  HDW/FUNC  ABORT 


PRELAUNCH; 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT; 

3/3 

AOA: 

DEORBIT: 

3/3 

ATO; 

LANDING/SAFING: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ ] 

LOCATION;  AFT  BODY 

PART  NUMBER;  40V43MT7 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  WITH  A SENSOR  INDICATING  CROSSFEED  TEMPERATURES 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  FIRST 
^DERSTANDING  IT  WAS  A SENSOR  FAILURE  AND  SECOND  EXCEPTING  THE 
RISKS  OF  LOSS  OF  DETECTABLITY  FOR  THE  THERMAL  SYSTEM.  fTHIS 
ENSURES  XFEED  FOR  ABORTS))  EFFECT;  LOSE  FAILURE  DETECTION  OF 
ASSOCIATED  HTR  SYSTEM.  HTR  SYSTEM  IS  NOT  MISSION  CRITICAL 
CROSSFEED  CAN  STILL  BE  ACCOMPLISHED.  ' 

REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,  REV  C 
DCN-5;  JSC-18549  15  OCT'82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-894 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/17/87 

SUBSYSTEM:  OMS 

MDAC  ID;  993 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  3/3 


ITEM;  BHD  OXIDIZER  HI  PT  BLEED  LINE  TEMP  SENSOR 

FAILURE  MODE;  ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS -OUT-OF- 
TOLERANCE) 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  BHD  OXIDIZER  HI  PT  BLEED  LINE  TEMP  SENSOR 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ ] 

B [ ] 

c [ ] 

LOCATION;  AFT  BODY 

PART  NUMBER;  40V43MT8 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

IN  DETERMINING  THE  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  WITH  A SENSOR  INDICATING  CROSSFEED  TEMPERATURES 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  FIRST 
UNDERSTANDING  IT  WAS  A SENSOR  FAILURE  AND  SECOND  EXCEPTING  THE 
RISKS  OF  LOSS  OF  DETECTABLITY  FOR  THE  THERMAL  SYSTEM.  (THIS 
ENSURES  XFEED  FOR  ABORTS))  EFFECT;  LOSE  FAILURE  DETECTION  OF 
ASSOCIATED  HTR  SYSTEM.  HTR  SYSTEM  IS  NOT  MISSION  CRITICAL, 
CROSSFEED  CAN  STILL  BE  ACCOMPLISHED. 

REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,  REV  C 
DCN-5;  JSC-18549  15  OCT'82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-895 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/17/87 

SUBSYSTEM;  OMS 
MDAC  ID;  994 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/2 

ABORT;  3/3 


ITEM; 

FAILURE  MODE; 
TOLERANCE) 


CENTER  - AFT  FUSLG  OXIDIZER  XFEED  LINE  TEMP  SENSOR 
ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS -OUT-OF- 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  CENTER  AFT  FUSLG  OXIDIZER  XFEED  LINE  TEMP  SENSOR 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/SAFING; 

REDUNDANCY  SCREENS: 


CRITICALITIES 
HDW/FUNC  ABORT 

3/3  RTLS; 

3/3  TAL; 

2/2  AOA; 

3/3  ATO; 

3/3 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION;  AFT  BODY 

PART  NUMBER:  50V43MT14 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

ASSUMED  A LAUNCH  WOULD  NOT 
WITH  A SENSOR  INDICATING  CROSSFEED  TEMPERATURES 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  FIRST 
TODERSTANDING  IT  WAS  A SENSOR  FAILURE  AND  SECOND  EXCEPTING  THE 
R^KS  OF  LOSS  OF  DETECTABLITY  FOR  THE  THERMAL  SYSTEM.  fTHIS 

ABORTS))  EFFECT:  WORST  CASE  WOULD  BE  A FALSE 
SYSTEM  FAILED  "OFF"  ON  A MISSION  CRITICAL 
^PABILITY^*  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED 

MFE^NCES;  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,  REV  C 
DCN-5;  JSC-18549  15  OCT'82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-896 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/17/87 

SUBSYSTEM:  OMS 

MDAC  ID:  995 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  LEFT  AFT  FUEL  XFEED  LINE  TEMP  SENSOR 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS-OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY : 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  LEFT  AFT  FUEL  XFEED  LINE  TEMP  SENSOR 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS:  A 

C ] 

B [ ] 

c [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43MT13 

CAUSES:  CONTAMINATION, 

VIBRATION, 

PIECE  PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : , „ ^ 

NO  EFFECT.  NOT  FOUND  IN  SSSH,  HTR  SYSTEMS  BOOK  JSC-18549,  OR 
MML.  ASSUMED  ERROR  IN  VS70-943099  DWG. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,  REV  C 

DCN-5;  JSC-18549  15  OCT'82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-897 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/17/87 

SUBSYSTEM:  OMS 

MDAC  ID:  996 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  3/3 


ITEM: 

SENSOR 

FAILURE  MODE: 
TOLERANCE) 


LEFT  AFT  FUSLG  LOW  PT  OXIDIZER  DRAIN  LINE  TEMP 
ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS -OUT-OF- 


LEAD ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  LEFT  AFT  FUSLG  LOW  PT  OXIDIZER  DRAIN  LINE  TEMP  SENSOR 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS: 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS:  A [ 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43MT9 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
place  with  a SENSOR  INDICATING  CROSSFEED  TEMPERATURES 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  FIRST 

^ SENSOR  FAILURE  AND  SECOND  EXCEPTING  THE 
DETECTABLITY  FOR  THE  THERMAL  SYSTEM.  (THIS 
ABORTS))  EFFECT;  LOSE  FAILURE  DETECTION  OF 
SYSTEM.  HTR  SYSTEM  IS  NOT  MISSION  CRITICAL 
CROSSFEED  CAN  STILL  BE  ACCOMPLISHED.  ' 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-11174  SSSH  REV  C 

DCN-5!  JSC-18549  15  OCT'82,  LTR  28  juis'ls:  JSC  2ollf Pc“I 


REPORT  DATE  02/04/87 


C-898 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/17/87 

SUBSYSTEM:  OMS 

MDAC  ID;  997 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  2/2 

ABORT;  3/3 


ITEM; 

FAILURE  MODE: 
TOLERANCE) 


LEFT  - AFT  FUSLG  OXIDIZER  XFEED  LINE  TEMP  SENSOR 
ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS-OtJT-OF- 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 

LEFT  AFT  FUSLG  OXIDIZER  XFEED  LINE  TEMP  SENSOR 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/ S AFING ; 

REDUNDANCY  SCREENS; 


HDW/FUNC 

3/3 

3/3 

2/2 

3/3 

3/3 

A [ ] 


ABORT 

RTLS: 

TAL; 

AOA: 

ATO; 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION; 
PART  NUMBER: 


AFT  BODY 
50V43MT2 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

in^dSe^ining  the  criticalities  it  is  assumed  a 

TAKE  PLACE  WITH  A SENSOR  INDICATING  CROSSFEED  TEMPERAT^S 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  FIRST 

undeStanding  it  was  a sensor  failure  and  second  excepting  ra 
RISKS  OF  loss  of  DETECTABLITY  FOR  THE  THERMAL  SYSTEM.  ^™^S 
ENSURES  XFEED  FOR  ABORTS)  EFFECT;  WORST  CASE  A FALSE 

tmdtcATION  of  HTR  SYSTEM  FAILED  "OFF**  ON  A MISSION  CRITICAL 
SiSSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONHECT/XFEED 

CAPABILITY. 

REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,^V  C 
DCN-sT  JSC-18549  15  OCT'82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-899 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/17/87 

OMS 

998 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


LEFT  AFT  OXIDIZER  XFEED  LINE  TEMP  SENSOR 
ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS-OUT-OF- 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  LEFT  AFT  OXIDIZER  XFEED  LINE  TEMP  SENSOR 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

2/2 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [ ] 

B [ ] 

c [ ] 

LOCATION: 
PART  NUMBER: 


AFT  BODY 
50V43MT19 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

I’'  '^SUMED  A LAOTCH  WOULD  NOT 

OuSiD^SL  DMTPFn  ^ CROSSPEED  TEMPERATURES 

DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  PTR<?T 

^ SENSOR  FAILURE  AND  SECOND  EXCEPTING  THE 
DETECTABLITY  FOR  THE  THERMAL  SYSTEM 
ABORTS))  effect:  LOSE  F^^iJ  StIoS  5f 
SYSTEM.  HTR  SYSTEM  IS  NOT  MISSION  CRITICAL 
STILL  BE  ACCOMPLISHED.  NOTE:  LOCATION  NOT  LISTED 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-11174  SSSH  RFV  r 

DCN-5?  JSC-18549  15  OCT'82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-900 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/17/87 

SUBSYSTEM:  OMS 

MDAC  ID:  999 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  RIGHT  AFT  FUEL  XFEED  LINE  TEMP  SENSOR 

FAILURE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS-OUT-OF 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RIGHT  AFT  FUEL  XFEED  LINE 

5) 

6) 

7) 

8) 

9) 


TEMP  SENSOR 


CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A 

[ ] 

B C ] 

c [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43MT01 

CAUSES:  CONTAMINATION, 

VIBRATION, 

PIECE  PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

NO  EFFECT.  NOT  FOUND  IN  SSSH,  HTR  SYSTEMS  BOOK  JSC-18549,  OR 
MML.  ASSUMED  ERROR  IN  VS70-943099  DWG. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,  REV  C 

DCN-5;  JSC-18549  15  OCT'82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-901 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  l/ll/Bl 

SUBSYSTEM:  OMS 

MDAC  ID:  1000 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

SENSOR 

FAILURE  MODE: 
TOLERANCE) 


RIGHT  AFT  FUSLG  LOW  PT  OXIDIZER  DRAIN  LINE  TEMP 
ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS-OUT-OF- 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RIGHT  AFT  FUSLG  LOW  PT  OXIDIZER  DRAIN  LINE  TEMP  SENSOR 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING ; 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/3 

AOA: 

3/3 

ATO: 

3/3 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43MT10 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
^ SENSOR  INDICATING  CROSSFEED  TEMPERATURES 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  FIRST 

^ SENSOR  FAILURE  AND  SECOND  EXCEPTING  THE 
DETECTABLITY  FOR  THE  THERMAL  SYSTEM.  (THIS 
XFEED  FOR  ABORTS))  EFFECT:  LOSE  FAILURE  DETECTION  OF 
ASSOCIATED  HTR  SYSTEM.  HTR  SYSTEM  IS  NOT  MISSION  CRITICAL 
CROSSFEED  CAN  STILL  BE  ACCOMPLISHED. 


^FERENCES;  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,  REV  C 
DCN-5;  JSC-18549  15  OCT'82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-902 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/17/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1001 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 
TOLERANCE) 


RIGHT  - AFT  FUSLG  OXIDIZER  XFEED  LINE  TEMP  SENSOR 
ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS-OUT-OF- 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RIGHT  AFT  FUSLG  OXIDIZER  XFEED  LINE  TEMP  SENSOR 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE  HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

2/2 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS:  A 

[ ] 

B [ ] 

c [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43MT3 

CAUSES:  CONTAMINATION, 

VIBRATION, 

PIECE  PART 

FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

IN  DETERMINING  THE  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  WITH  A SENSOR  INDICATING  CROSSFEED  TEMPERATURES 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  FIRST 
UNDERSTANDING  IT  WAS  A SENSOR  FAILURE  AND  SECOND  EXCEPTING  THE 
RISKS  OF  LOSS  OF  DETECTABLITY  FOR  THE  THERMAL  SYSTEM.  (THIS 
ENSURES  XFEED  FOR  ABORTS))  EFFECT:  WORST  CASE  WOULD  BE  A FALSE 
INDICATION  OF  HTR  SYSTEM  FAILED  ••OFF”  ON  A MISSION  CRITICAL 
CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF  INTERCONNECT/XFEED 
CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,  REV  C 

DCN-5;  JSC-18549  15  OCT'82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-903 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/17/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1002 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  2/2 

ABORT:  3/3 


ITEM:  RIGHT  AFT  OXIDIZER  XFEED  LINE  TEMP  SENSOR 

FAIUJRE  MODE:  ERRONEOUS  OUTPUT  (SHORTED,  OPEN,  FAILS-OUT-OF- 

TOLERANCE) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
2}  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  RIGHT  AFT  OXIDIZER  XFEED  LINE  TEMP  SENSOR 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

REDUNDANCY  SCREENS: 


LOCATION:  AFT  BODY 

PART  NUMBER:  50V43MT20 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  THE  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  WITH  A SENSOR  INDICATING  CROSSFEED  TEMPERATURES 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F)  WITH  OUT  FIRST 
UNDERSTANDING  IT  WAS  A SENSOR  FAILURE  AND  SECOND  EXCEPTING  THE 
RISKS  OF  LOSS  OF  DETECTABLITY  FOR  THE  THERMAL  SYSTEM.  (THIS 
ENSURES  XFEED  FOR  ABORTS))  EFFECT:  LOSE  FAILURE  DETECTION  OF 
ASSOCIATED  HTR  SYSTEM.  HTR  SYSTEM  IS  NOT  MISSION  CRITICAL, 
CROSSFEED  CAN  STILL  BE  ACCOMPLISHED.  NOTE:  LOCATION  NOT  LISTED 
ON  VS70-943099  (43-AJ)  DWG  LOCATION  WAS  DETERMINED  FROM  SSSH  AND 
HTR  SYSTEMS  BOOK  JSC-18549. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-11174,  SSSH,  REV  C 

DCN-5;  JSC-18549  15  OCT*82,  LTR  28  JUNE'85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-904 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1003 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUEL  & OXIDIZER  FLEX  LINE  OVER  TEMP  (LT  DECK) 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  FLEX  LINE 

5) 

6) 

7) 

8) 

9) 


OVER  TEMP  (LT  DECK) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1012;  S2012 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-905 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1004 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


FUEL  & OXIDIZER  FLEX  LINE  OVER  TEMP  (LT  DECK) 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  FLEX  LINE  OVER  TEMP  (LT  DECK) 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1012;  S2012 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE 
RESULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
TO  90  F).  SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
THERMOSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
OR  B.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 
MORE  HTR'S  FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 

FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-906 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1005 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUEL  & OXIDIZER  FLEX  LINE  OVER  TEMP  (RT  DECK) 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  FLEX  LINE 

5) 

6) 

7) 

8) 

9) 


OVER  TEMP 


(RT  DECK) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS;  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1022;  S2022 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS /RATIONALE : „ 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F) . THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  IX)SS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF”  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85?  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-907 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1006 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


FUEL  & OXIDIZER  FLEX  LINE  OVER  TEMP  (RT  DECK) 
FAILS  SHORT  ' 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  FLEX  LINE  OVER  TEMP  (RT  DECK) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING ; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS: 

TAL; 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ 3 ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1022;  S2022 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


c [ p 3 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

assumed  A LAUNCH  WOULD  NOT 

TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSS  FEED  LN»S  WFPF 

^ rais“'w?if  “sure 

SsD??I  aborts.  EFFECTS;  FIRST  FAILURE 

j^SULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM’S  OPERATING  RANGE  F 
TO  90  E).  SECOMD  FAILURE  IN  THE  SAKE  SYSTOM  ' 

raEJ^OS^T)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
OR  B.  I/DSS  OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONF  np 
MORE  HTR'S  FAILED  "ON"  WHICH  COULD  RESULT  IN  LO^  orM IS LSn  fSr 
S^ETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 
FAILED  "ON”  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
^ • ) 


REFERENCES 

28JUNE85; 


: VS70-943099  REV  A EO  B12;  JSC-18549  150CT82 

JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SE 


LTR 

4 


REPORT  DATE  02/04/87 


C-908 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

ITEM: 


1/18/87 

OMS 

1007 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER 


FUEL  & OXIDIZER  LOWER  CENTER  FEED  LINE  OVER  TEMP 

SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  CENTER  FEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1052;  S2052 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


effects  / ration  a TfB  S 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  ^ROSSFEED  S ^ 

OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  Wlli  ENSU^ 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILU^  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF*'  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-909 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID;  1008 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT;  3/3 

JSSiHE  hode: 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  CENTER  FEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ SAFING: 

REDUNDANCY  SCREENS; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS; 

TAL; 

AOA: 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION; 
PART  NUMBER; 


AFT  BODY 

50V43S1052;  S2052 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

I®  ASSUMED  A LAUNCH  WOULD  NOT 

TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN’S  WERF 

Ssu??i  aborts.  EFFECTS;  FIRST  FAILURE 

^SULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  r7«^  E 
TO  90  P).  SECOND  PAILURE  IN  THE  SAME  SYSTEM 

T^^OSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
MnoE*  redundancy  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 

SA^Tf^SoSi^ov^S^'^E^."^”  LOSS  OF  MIsLSn  FOR 

eVt?SS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 

FAILED  ON  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 

^FERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82  LTR 
28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-910 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

DATE;  1/18/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM;  OMS  FLIGHT; 

MDAC  ID;  1009  ABORT;  3/3 

ITEM;  FUEL  & OX  LOWER  CENTER  XFEED  LINE  CONTROL  TEMP 

FAILURE  MODE;  FAILS  OPEN 

LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  CENTER  XFEED  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF: 

3/3 

TAL; 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING; 

3/3 

REDUNDANCY  SCREENS; 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER;  50V43S1051;  S2051 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITITES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-911 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1010 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


FUEL  & OX  LOWER  CENTER  XFEED  LINE  CONTROL  TEMP 
FAILS  SHORT 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  CENTER  XFEED  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1051;  S2051 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE 
RESULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
TO  90  F) . SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
THERMOSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
OR  B.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 
MORE  HTR'S  FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 
FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F.) 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-912 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1011 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  FUEL  & OXIDIZER  LOWER  LEFT  FEED  LINE  OVER  TEMP 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  LEFT  FEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS; 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO; 

3/3 

LANDING/SAFING; 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1032;  S2032 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OP  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  ''OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-913 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/18/87 

OMS 

1012 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


FUEL  & OXIDIZER  LOWER  LEFT  FEED  LINE  OVER  TEMP 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  LEFT  FEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF; 

3/3 

TAL; 

3/3 

ONORBIT; 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  AFT  BODY 

PART  NUMBER:  50V43S1032;  S2032 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IP  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE 
RESULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
TO  90  F).  SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
THERMOSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
OR  B.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 
MORE  HTR'S  FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 
FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-914 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/18/87 

OMS 

1013 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


FUEL  & OX  LOWER  LEFT  XFEED  LINE  CONTROL  TEMP 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  LEFT 

5) 

6) 

7) 

8) 

9) 


XFEED  LINE  CONTROL  TEMP 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

PRELAUNCH: 

3/3 

RTLS 

LIFTOFF: 

3/3 

TAL: 

ONORBIT: 

3/2R 

AOA: 

DEORBIT: 

3/3 

ATO: 

LANDING/S AFING : 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1031;  S2031 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE: 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  IX)SS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  ”OFF”  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943  099  REV  A EO  B12 ; JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-915 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1014 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


FUEL  & OX  LOWER  LEFT  XFEED  LINE  CONTROL  TEMP 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  LEFT  XFEED  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B C P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1031;  S2031 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

ASSUMED  A LAUNCH  WOULD  NOT 
TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 

LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE 

^ INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
TO  90  F).  SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
raE^OSJ^T)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 
MORE  HTR'S  FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
S^ETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 

FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-916 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1015 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


FUEL  & OXIDIZER  LOWER  RIGHT  FEED  LINE  OVER  TEMP 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  RIGHT  FEED 

5) 

6) 

7) 

8) 

9) 


LINE  OVER  TEMP 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL; 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS;  A [ 3 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1042;  S2042 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


?"DMra^HSf^iTICALITIES  IT  IS  ASSUMED  A LAUHCB  HOT 

TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  ® 

OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  ENSU^ 

CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILUM  COULD 

RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF 
MDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF"  ^ MISSION 

CRITICAL  CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-917 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1016 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/3 


ITEM: 

FAILURE  MODE: 


FUEL  & OXIDIZER  LOWER  RIGHT  FEED  LINE  OVER  TEMP 
FAILS  SHORT 


lead  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  RIGHT  FEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/S AFING ; 

REDUNDANCY  SCREENS; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1042;  S2042 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOUT  D unfr 

CROSSFEED  LN'S  WERE 

SrEciD  CAPABIIjITIES  FOR  ABORTS*  EFFECTS*  pATTiT'ot* 

^SULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  /"7S  E 
TO  90  F).  SECOND  FAILURE  IN  THE  SAME  SYSTEM  ^ ^ 

THE^OS^T)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
OR  B*  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  he  hme  no 
MO^  HTR'S  FAILED  "ON"  WHICH  COTM  ^SuSt  J^L^^  orMIsIinf 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS)  (ONE  HTR  ELEMENT 
FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A slSiFACE^*TEli5  L H^gI™^^ 


VS70-943099  REV  A EO  B12;  JSC-18549  150CT8’ 
28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  si 


LTR 

4 


REPORT  DATE  02/04/87 


C-918 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1017 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  FUEL  & OX  LOWER  RIGHT  XFEED  LINE  CONTROL  TEMP 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  RIGHT  XFEED  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 3 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1041;  S2041 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  ”OFF”  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-919 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1018 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


FUEL  & OX  LOWER  RIGHT  XFEED  LINE  CONTROL  TEMP 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  & OXIDIZER  LOWER  RIGHT  XFEED  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1041;  S2041 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILU^ 

^ INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (15  F 
TO  90  F).  SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
THE^OSJ^T)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 

REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 
MO^  HTR  S FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  INS).  (ONE  HTR  ELEMENT 

FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 

F . ) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-920 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/18/87 

OMS 

1019 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


item:  fuel  flex  line  control  temp 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  FLEX  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1011;  S2011 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS /RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSTOE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-921 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


date:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1020 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  FUEL  FLEX  LINE  CONTROL  TEMP 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  FLEX  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS;  A [ 2 ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1011;  S2011 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES: 


CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE ; 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 

CROSSfLd”cAPaI???^tp^“p^^^  ^ ENSURE 

aborts.  EFFECTS;  FIRST  FAILURE 

INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
mu  ^-^2  ^ * SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
raE^OS^T)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
SnoS*  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 

MORE  HTR'S  FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
S^ETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 

FAILED  *ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F . ) 


REFERENCES 
2 8 JUNES 5; 


: VS70-943099  REV  A EO  B12;  JSC-18549  150CT82, 

JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ 


LTR 

4 


REPORT  DATE  02/04/87 


C-922 


INDEPENDENT  ORBITER  ASSESSMENT 

orbtter  subsystem  analysis  worksheet 


DATE:  1/18/87 

SUBSYSTEM;  OMS 
MDAC  ID;  1021 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM; 

FAILURE  MODE; 
LEAD  ANALYST; 


FUEL  HI  PT  BLEED  LINE  CONTROL  TEMP 
FAILS  OPEN 

V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3^  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  HI  PT  BLEED  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 
RTLS; 
TAL; 
AOA: 
ATO; 


REDUNDANCY  SCREENS;  A [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION;  AFT  BODY 

PART  NUMBER;  50V43S1101;  S2101 

CAUSES:  CONTAMINATION,  VIBRATION, 


PIECE  PART  FAILURE,  OVERLOAD 


?r^SK”TICALITIES  IT  IS  ^ 

HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  or. 

ACCOMPLISHED. 


EEPEEEHCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-923 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM;  OMS 
MDAC  ID:  1022 


ITEM: 

failure  MODE; 


highest  criticality  hdw/func 

FLIGHT:  3/2R 

ABORT:  3/3 

FAi^LS  ^SH<^T^^^^  I*INE  CONTROL  TEMP 


lead  ANALYST:  V.J.  BURKEMPER 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 
FUEL  HI  PT  BLEED  LINE  CONTROL  TEMP 


SUBSYS  LEAD:  D.J.  PAUL 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

hdw/func 

3/3 

3/3 

3/3 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

FLIGHT  PHASE  - CRITICALITIES 

PRELAUNCH: 

LIFTOFF; 

ONORBIT; 

deorbit ; 

LANDING/SAFING ; 

REDUNDANCY  SCREENS; 

LOCATION:  aft  BODY 

PART  NUMBER:  50V43S1101;  S2101 

causes:  contamination,  vibration,  piece  part  failure,  overload 
EFFECTS/RATIONALE: 

take*^pSce*^if°tempe^tuSs^on^t^  ^ launch  would  not 

OUTSIDE  THE  DESIRED  LIMITS  MAIN  CROSSFEED  LN'S  WERE 

CROSSFEED  CAPABILITIES  WILL  ENSURE 

RESULTS  IN^  INC^ll  . EFFECTS:  FIRST  FAILURE 

TO  90  F).  SECOND  FAILURE  O^^^TING  RANGE  (75  F 

THERMOSTAT)  WI^°  RESULT^IN  (OVERTEMP 

OR  B.  LOSS  * 

more  HTR'S  FAILED  mic/cOTLD^RFcm^®?^T 

SAFETY  REASONS  (OVER  TEMP  ^ CROSS^D^H.^  “^®SI0N  FOR 

FAILED  -ON-  CONTINUOUSLY  CAN  HAVE  ^Fwi 'TElip'ls’l^o™^^ 


REFERENCES*  VS70"*94  3OQQ  pptz  ^ m 

28JUNE8S:  JSC  10823  PCN-1,  MCiei^Oo®" Wv^C  AMENuiilS51 


LTR 

4 


REPORT  DATE  02/04/87 


C-924 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/18/87 

OMS 

1023 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  FUEL  HI  PT  BLEED  LINE  OVER  TEMP 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  HI  PT  BLEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ S AFING : 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c t ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1102;  S2102 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE: 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F) . THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-925 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM;  OMS 
MDAC  ID;  1024 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


ITEM;  FUEL  HI  PT  BLEED  LINE  OVER  TEMP 

FAILURE  MODE;  FAILS  SHORT 


HDW/FUNC 

3/2R 

3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 


1) 

ELECTRICAL  COMPONENTS 

2) 

CROSSFEED 

3) 

THERMAL  CONTROL 

SUBSYSTEM 

4) 

FUEL  HI  PT  BLEED 

LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 

FLIGHT  PHASE 
PRELAUNCH; 

CRITICALITIES 

HDW/FUNC 

3/3 

ABORT 

RTLS; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

LIFTOFF; 

3/3 

TAL; 

ONORBIT; 

3/2R 

AOA: 

DEORBIT; 
LANDING/ SAFING 

3/3 
: 3/3 

ATO: 

REDUNDANCY  SCREENS: 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER;  50V43S1102;  S2102 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN*S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  FK  THIS^WIlI  ^SURF 

SsULTS^IN^^?nprfa?f  ABORTS.  EFFECTS;  FIRST  FAILURE 

increase  of  the  HTR  SYSTEM'S  OPERATING  RANGE  f75  F 
FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
THE^OS^T)  WILL  ^SULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
Mrtop*  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 

RESULT  IN  LOSS  OF  MISSION  FOR 

SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 
FAILED  -ON-  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP 

F . } 


REFERENCES 
2 8 JUNES 5; 


; VS70-943099  REV  A EO  B12;  JSC-18549  150CT82, 

JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ 


LTR 

4 


REPORT  DATE  02/04/87 


C-926 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM;  OMS 
MDAC  ID;  1025 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


ITEM; 

FAILURE  MODE; 


FUEL  HI  PT  BLEED  LINE  T-4  UMB  OVER  TEMP 
FAILS  OPEN 


HDW/FUNC 

3/3 

3/3 


lead  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  HI  PT  BLEED  LINE  T-4 

5) 

6) 

7) 

8) 

9) 


UMB  OVER  TEMP 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS; 

TAL; 

AOA; 

ATO; 


REDUNDANCY  SCREENS;  A [ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION;  AFT  BODY 

PART  NUMBER;  40V43S1122;  S2122 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


IN  DETERMINING  CRITICALITIES  IT  IS  ^ 

TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEM  ^ S 

OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  ™ ® J|^Lr 

rPOSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  LOSE  ASSOCIATED  HTR 

fmlSe  results  in  loss  op  redundant  system,  the 

HtoIyS-^  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85;  JSC  20923  PCN-1 


report  date  02/04/87 


C-927 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

HDW/FUNC 
3/2R 
3/3 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  HI  PT  BLEED  LINE  T-4  UMB  OVER  TEMP 
5 ) 

6) 

7) 

8) 

9) 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/18/87 

OMS 

1026 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


mode: 


»T  CRITICALITIES 

VA. 

deorbit:  3/3  V3 

lANDIHG/SAFING:  3/3 

EEDUHDAHCY  SCREENS:  A[3]  B[P]  CtPI 

LOCATION:  AFT  BODY 

PART  NUMBER:  40V43S1122;  S2122 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

-^gsURE 


B [ P ] 


hdw/func 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


REFERENCES:  VS70-943099 

28JUNE85;  JSC  20923  PCN-1 


REV  A EO  B12;  JSC-18549  150CT82,  LTR 
; MC3 63-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-928 


DATE; 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/18/87 

OMS 

1027 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT;  3/3 


ITEM:  FUEL  HI  PT  BLEED  LINE  T-4  UMB.  CONTROL  TEMP 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  HI  PT  BLEED  LINE  T-4  UMB. 

5) 

6) 

7) 

8) 

9) 


CONTROL  TEMP 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH; 

3/3 

RTLS; 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ S AFING ; 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION;  AFT  BODY 

PART  NUMBER:  40V43S1121;  S2121 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


CFFECTS /RATIONALE  S 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  {<50  F OR  >90  F).  THIS 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  I/5SE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12 ; JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-929 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1028 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


FUEL  HI  PT  BLEED  LINE  T-4  UMB.  CONTROL  TEMP 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  FUEL  HI  PT  BLEED  LINE  T-4  UMB.  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING ; 

REDUNDANCY  SCREENS; 


CRITICALITIES 


HDW/FUNC 

ABORT 

HDW/FUNC 

3/3 

RTLS; 

3/3 

3/3 

TAL: 

3/3 

3/2R 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 3 

B [ P ] 

C [ P 3 

LOCATION:  AFT  BODY 

PART  NUMBER;  40V43S1121;  S2121 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN*S  WERE 

C^SSFLD^CAPABTLTTTFq^  ^ ENSURE 

SsuIt?  aborts.  effects:  FIRST  FAILURE 

^SULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (-7S  E 
1°  90  ^)-  SECOKD  FAILURE  IN  THE  SAME  SYSTEM  (OvSeMP  ‘ 

THERMOS^)  Mlli  RESULT  IN  THE  I/3SS  OP  THE  ASSOCIATED  HTR  GROUP  A 
MrtTJw*  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 

SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  fONE  HTR  ELEMENT 
FAILED  -OH-  CONTINUOUSLY  CAN  HAVE  A SURfTcE  TEMns^^l^f 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SE 


LTR 

4 


REPORT  DATE  02/04/87 


C-930 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1029 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


item:  L fuel  & OXIDIZER  LO  PT  BLEED  LINE  OVER  TEMP 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  L FUEL  & OXIDIZER  LO  PT  BLEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING; 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS: 


A [ ] 


B [ ] 


C [ ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1142;  S2142 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDtJNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-931 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM;  OMS 
MDAC  ID;  1030 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


HDW/FUNC 

3/2R 

3/3 


ITEM;  L FUEL  & OXIDIZER  LO  PT  BLEED  LINE  OVER  TEMP 

FAILURE  MODE;  FAILS  SHORT 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  L FUEL  & OXIDIZER  LO  PT  BLEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS; 

TAL; 

AOA; 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

REDUNDANCY  SCREENS; 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  AFT  BODY 

PART  NUMBER;  50V43S1142;  S2142 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE 
RESULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
TO  90  F).  SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
THERMOSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
OR  B.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 
MORE  HTR'S  FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 
FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F.) 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-932 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 

date:  1/18/87  HIGHEST  CRITICALITY  HDW/FUNC 

SUBSYSTEM:  OMS  FLIGHT:  3/3 

MDAC  ID:  1031  ABORT:  3/3 

ITEM:  L FUEL  & OXIDIZER  LO  PT  DRAIN  LINE  CONTROL  TEMP 

FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
2}  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  L FUEL  & OXIDIZER  LO  PT  DRAIN  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 

FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1141;  S2141 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F) . THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-933 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1032 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  L FUEL  & OXIDIZER  LO  PT  DRAIN  LINE  CONTROL  TEMP 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  L FUEL  & OXIDIZER  LO  PT  DRAIN  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1141;  S2141 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE 
RESULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
TO  90  F).  SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
THERMOSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
OR  B.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 
MORE  HTR'S  FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 
FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-934 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


1/18/87 

OMS 

1033 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


OXIDIZER  FLEX  LINE  CONTROL  TEMP 
FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  FLEX  LINE  CONTROL 

5) 

6) 

7) 

8) 

9) 


TEMP 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1021;  S2021 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE  COULD 
RESULT  IN  LOSS  OF  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF  ALL 
REDUNDANCY  WOULD  RESULT  IN  A FAILED  "OFF"  HTR  SYSTEM  ON  A MISSION 
CRITICAL  CROSSFEED  LN.  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY. 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-935 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1034 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM:  OXIDIZER  FLEX  LINE  CONTROL  TEMP 

FAILURE  MODE:  FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  FLEX  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1021;  S2021 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE 
RESULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
TO  90  F).  SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
THERMOSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
OR  B.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 
MORE  HTR'S  FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 
FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-936 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM;  OMS 
MDAC  ID;  1035 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM;  OXIDIZER  HI  PT  BLEED  LINE  CONTROL  TEMP 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  HI  PT  BLEED  LINE  CONTROL  TEMP 


CRITICALITIES 
HDW/FUNC  ABORT 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


B [ P ] 


C [ P ] 


FLIGHT  PHASE  HDW/FUNC  ABORT  HDW/FUNC 

PRELAUNCH;  3/3  RTLS;  3/3 

LIFTOFF:  3/3  TAL;  3/3 

ONORBIT;  3/3  AOA:  3/3 

DEORBIT;  3/3  ATO;  3/3 

LANDING/SAFING:  3/3 

REDUNDANCY  SCREENS;  A[2]  B[P]  C[P] 

LOCATION;  AFT  BODY 

PART  NUMBER;  50V43S1111;  S2111 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F) . THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-937 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM;  OMS 
MDAC  ID;  1036 


HIGHEST  CRITICALITY 
FLIGHT; 
ABORT; 


ITEM; 

FAILURE  MODE; 


OXIDIZER  HI  PT  BLEED  LINE  CONTROL  TEMP 
FAILS  SHORT 


HDW/FUNC 

3/2R 

3/3 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  HI  PT  BLEED  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 


ABORT 

RTLS: 

TAL; 

AOA; 

ATO; 


REDUNDANCY  SCREENS;  A [ 2 ] 

LOCATION;  AFT  BODY 

PART  NUMBER;  50V43S1111;  S2111 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS/RATIONALE ; 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 

C^SSFLn^CAPABTff^TPQ^^^^^  ^ ENSURE 

CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE 

^ INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 

PAILUIii;  IN  THE  SAME  SYSTEM  (OVEEriMP  ‘ 

T^^OST^)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 

redundancy  results  in  both  elements  of  o^e  or 

SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMFWT 

AILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F . ; 


REFERENCES 

28JUNE85; 


; VS70-943099  REV  A EO  B12;  JSC-18549  150CT82, 

JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEC 


LTR 

4 


REPORT  DATE  02/04/87 


C-938 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE;  1/18/87 

SUBSYSTEM;  OMS 
MDAC  ID;  1037 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT;  3/3 

ABORT;  3/3 


ITEM;  OXIDIZER  HI  PT  BLEED  LINE  OVER  TEMP 

FAILURE  MODE;  FAILS  OPEN 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  HI  PT  BLEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT; 
DEORBIT; 
LANDING/ S AFING ; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL; 

AOA; 

ATO; 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


REDUNDANCY  SCREENS;  A [ 


B [ ]■  C [ ] 


LOCATION;  AFT  BODY 

PART  NUMBER;  50V43S1112;  S2112 

CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE;  . 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F) . THIS  WILL  ENSTOE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85?  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-939 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM;  OMS 
MDAC  ID:  1038 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


OXIDIZER  HI  PT  BLEED  LINE  OVER  TEMP 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  HI  PT  BLEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT: 
DEORBIT; 
LANDING/SAFING: 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/2R 

3/3 

3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS;  A [ 3 ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1112;  S2112 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE ; 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 

CROSSFEED  LN'S  WERE 

OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL 

SsST?iN^^?NOT?iql  aborts.  EFFECTS:  FIRST  FAILURE 

increase  of  the  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
^ * SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
THE^OS^T)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
Sno?*  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 

MORE  HTR  S FAILED  "ON”  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 
FAILED  -ON»  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  ^2 

F . ) 


REFERENCES 
2 8 JUNES  5,* 


: VS70-943099  REV  A EO  B12;  JSC-18549  150CT82, 

JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ 


LTR 

4 


REPORT  DATE  02/04/87 


C-940 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE: 

SUBSYSTEM: 
MDAC  ID: 

ITEM: 


1/18/87 

OMS 

1039 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


FAILURE  MODE:  FAILS  OPEN 

LEAD  ANALYST:  V.J.  BURKEMPER 


OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB  OVER  TEMP 

SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 

OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB  OVER  TEMP 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS; 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  40V43S1132;  S2132 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


effects /rationale  I 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WO^D  NOT 

TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN  S 

OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS 

CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 

SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 

HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 

ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-941 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1040 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB  OVER  TEMP 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT; 
LANDING/SAFING; 

REDUNDANCY  SCREENS: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO; 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [ 3 ] 

B [ P ] 

C [ P ] 

LOCATION;  AFT  BODY 

PART  NUMBER:  40V43S1132;  S2132 


causes:  cohtaminatioh,  vibration,  piece  part  failure,  overload 
EFFECTS/RATIONALE ; 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  not 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  cloSSP^™S.S 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F^  raiS  WIlTmsurf 

SiuLS®?N‘^*?H^iF«p  FIRST  FAKuS 

S"**:  SYSTEM  ' 

THE^OSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
MODw*  redundancy  results  in  both  elements  of  ONE  OR 

MORE  HTR  S FAILED  "ON”  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 

FAILED  'ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F • ) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SE 


LTR 

4 


REPORT  DATE  02/04/87 


C-942 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1041 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB.  CONTROL  TEMP 
FAILS  OPEN 


LEAD  analyst:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB. 

5) 

6) 

7) 

8) 

9) 


CONTROL  TEMP 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 


ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS:  A [ ] B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION:  AFT  BODY 

PART  NUMBER:  40V43S1131;  S2131 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


S^Era^HMo'^ITICALITIES  IT  IS  ASSUMED  A LADHCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  ^ S WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F) . THIS 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-943 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1042 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT;  3/3 

PMSinE  MODE:  ^ 


LEAD  ANALYST;  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY; 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 

OXIDIZER  HI  PT  BLEED  LINE  T-4  UMB.  CONTROL  TEMP 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF; 
ONORBIT; 
DEORBIT: 
LANDING/SAFING; 

REDUNDANCY  SCREENS; 


CRITICALITIES 


HDW/FUNC 

3/3 

3/3 

3/2R 

3/3 

3/3 

ABORT 

RTLS: 

TAL: 

AOA: 

ATO: 

HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

A [ 2 ] 

B [ P ] 

c [ P ] 

LOCATION: 
PART  NUMBER: 


AFT  BODY 

40V43S1131;  S2131 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 

temperatures  on  the  main  crossfeed  ln's  were 

^ CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE 
^SULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  e 

in  the  same  ™stem  PS?em^  ‘ 

THE^OSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
MOPE*  REDUNANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 

SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  ^ONE  HTR  PTEMEmt’ 
^AILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 

^FERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82  LTR 
28JUNE85;  JSC  20923  PCN-l;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-944 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1043 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  R FUEL  & OXIDIZER  LO  PT  BLEED  LINE  OVER  TEMP 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
CROSSFEED 

THERMAL  CONTROL  SUBSYSTEM 

R FUEL  & OXIDIZER  LO  PT  BLEED  LINE  OVER  TEMP 


2) 

3) 

4) 

5) 

6) 

7) 

8) 
9) 


CRITICALITIES 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING: 

REDUNDANCY  SCREENS; 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 

3/3 

A [ ] 


ABORT 
RTLS; 
TAL: 
AO  A: 
ATO; 


B [ ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ ] 


LOCATION; 
PART  NUMBER: 


AFT  BODY 

50V43S1152;  S2152 


CAUSES;  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 
EFFECTS /RATIONALE ! 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES;  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 
28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-945 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1044 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


R FUEL  & OXIDIZER  LO  PT  BLEED  LINE  OVER  TEMP 
FAILS  SHORT 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  R FUEL  & OXIDIZER  LO  PT  BLEED  LINE  OVER  TEMP 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH; 
LIFTOFF; 
ONORBIT: 
DEORBIT: 
LANDING/SAFING : 


CRITICALITIES 
HDW/FUNC  ABORT 


3/3 

3/3 

3/2R 

3/3 

3/3 


RTLS: 

TAL: 

AOA: 

ATO: 


REDUNDANCY  SCREENS;  A [ 3 ] 


B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION: 
PART  NUMBER: 


AFT  BODY 

50V43S1152;  S2152 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

ASSUMED  A LAUNCH  WOULD  NOT 
TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 

CROSSfLd”LpII^??tt^q^^^^^  ^ ensure 

raoSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS;  FIRST  FAILURE 

^ INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
TO  90  F).  SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
raE^OSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
Mnow*  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 

® FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 

FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F . ) 


REFERENCES 
2 8 JUNES 5; 


; VS70-943099  REV  A EO  B12;  JSC-18549  150CT82, 

JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ 


LTR 

4 


REPORT  DATE  02/04/87 


C-946 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1045 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/3 

ABORT:  3/3 


ITEM:  R FUEL  & OXIDIZER  LO  PT  DRAIN  LINE  CONTROL  TEMP 

FAILURE  MODE:  FAILS  OPEN 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  R FUEL  & OXIDIZER  LO  PT  DRAIN  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/3 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ ] 

B [ ] 

c [ ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1151;  S2151 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN'S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  LOSE  ASSOCIATED  HTR 
SYSTEM.  SECOND  FAILURE  RESULTS  IN  LOSS  OF  REDUNDANT  SYSTEM.  THE 
HTR  SYSTEM  IS  NOT  MISSION  CRITICAL.  CROSSFEED  CAN  STILL  BE 
ACCOMPLISHED. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1 


REPORT  DATE  02/04/87 


C-947 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/18/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1046 

ITEM:  R FUEL  & OXIDIZER 

FAILURE  MODE:  FAILS  SHORT 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 

LO  PT  DRAIN  LINE  CONTROL  TEMP 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  R FUEL  & OXIDIZER  LO  PT  DRAIN  LINE  CONTROL  TEMP 

5) 

6) 

7) 

8) 

9) 


CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT; 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  AFT  BODY 

PART  NUMBER:  50V43S1151;  S2151 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 

EFFECTS/RATIONALE : 

IN  DETERMINING  CRITICALITIES  IT  IS  ASSUMED  A LAUNCH  WOULD  NOT 
TAKE  PLACE  IF  TEMPERATURES  ON  THE  MAIN  CROSSFEED  LN*S  WERE 
OUTSIDE  THE  DESIRED  LIMITS  (<50  F OR  >90  F).  THIS  WILL  ENSURE 
CROSSFEED  CAPABILITIES  FOR  ABORTS.  EFFECTS:  FIRST  FAILURE 
RESULTS  IN  AN  INCREASE  OF  THE  HTR  SYSTEM'S  OPERATING  RANGE  (75  F 
TO  90  F).  SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP 
THERMOSTAT)  WILL  RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A 
OR  B.  LOSS  OF  ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR 
MORE  HTR'S  FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR 
SAFETY  REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT 
FAILED  "ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352 
F.) 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC-18549  150CT82,  LTR 

28JUNE85;  JSC  20923  PCN-1;  MC363-0031  REV  C AMENDMENT  SEQ  4 


REPORT  DATE  02/04/87 


C-948 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1047 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM:  SWITCH  TOGGLE,  OMS  XFEED  LINES  A AUTO  (S7) 

FAILURE  MODE:  FAILS  TO  SWITCH  (STUCK  IN  OFF  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SWITCH  TOGGLE,  OMS  XFEED  LINES  A AUTO  (S7) 

5) 

6) 

7) 

8) 

9) 

CRITICALITIES 


FLIGHT  PHASE 

HDW/FUNC 

ABORT 

HDW/FUNC 

PRELAUNCH: 

3/3 

RTLS: 

3/3 

LIFTOFF: 

3/3 

TAL: 

3/3 

ONORBIT: 

3/2R 

AOA: 

3/3 

DEORBIT: 

3/3 

ATO: 

3/3 

LANDING/ SAFING: 

3/3 

REDUNDANCY  SCREENS: 

A [ 2 ] 

B [ P ] 

c [ P 3 

LOCATION:  PNL  14 

PART  NUMBER:  36V73A14-S7 

CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  TURN  OFF  ''A''  XFEED  HTR  SYSTEM.  CONTROL 
THERMOSTATS  WILL  MAINTAIN  PROPER  THERMAL  ENVIRONMENT.  SECOND 
FAILURE  IN  REDUNDANT  SYSTEM  RESULTS  IN  BOTH  "A"  & "B"  XFEED  HTR 
SYSTEMS  STUCK  IN  AUTO  MODE. 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 
RESULT  IN  THE  LOSS  OF  THE  ASSOCIATED  HTR  GROUP  A OR  B.  LOSS  OF 
ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR'S 
FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 
REASONS  (OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
"ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 

REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85;  MF004-400  REV  C 


REPORT  DATE  02/04/87 


C-949 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/21/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1048 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


SWITCH  TOGGLE,  OMS  XFEED  LINES  A AUTO  (S7) 
FAILS  TO  SWITCH  (STUCK  IN  AUTO  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER  SUBSYS  LEAD:  D.J.  PAUL 

BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SWITCH  TOGGLE,  OMS  XFEED  LINES  A AUTO  (S7) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/ SAFING : 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] 

LOCATION:  PNL  14 

PART  NUMBER:  36V73A14-S7 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  TURN  OFF  "A”  XFEED  HTR  SYSTEM.  CONTROL 

MAINTAIN  PROPER  THERMAL  ENVIRONMENT.  SECOND 

FAILURE  IN  REDUNDANT  SYSTEM  RESULTS  IN  BOTH  "A”  & '*B"  XFEED  HTR 
SYSTEMS  STUCK  IN  AUTO  MODE.  xn  a s.  b xfeed  HTR 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 
RESULT  IN  THE  LOSS  OP  THE  ASSOCIATED  HTR  GROdSToIT  OF 

ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR'S 
FAILED  "ON"  WHICH  COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 

CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
"ON"  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85;  MF0004-400  REV  C 


REPORT  DATE  02/04/87 


C-950 


DATE: 

SUBSYSTEM: 
MDAC  ID: 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


1/05/87 

OMS 

1049 


HIGHEST  CRITICALITY  HDW/FUNC 
FLIGHT:  3/2R 

ABORT:  3/3 


ITEM: 

FAILURE  MODE: 


SWITCH  TOGGLE,  OMS  XFEED  LINES  B AUTO  (S8) 
FAILS  TO  SWITCH  (STUCK  IN  OFF  POSITION) 


LEAD  ANALYST:  V.J.  BURKEMPER 


SUBSYS  LEAD:  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 

2)  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SWITCH  TOGGLE,  OMS  XFEED 

5) 

6) 

7) 

8) 

9) 


LINES  B AUTO  (S8) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT: 
DEORBIT: 
LANDING/SAFING: 


CRITICALITIES 


HDW/FUNC 

ABORT 

3/3 

RTLS 

3/3 

TAL: 

3/2R 

AOA: 

3/3 

ATO: 

3/3 

REDUNDANCY  SCREENS:  A [ 2 ] B [ P ] 


HDW/FUNC 

3/3 

3/3 

3/3 

3/3 


C [ P ] 


LOCATION:  PNL  14 

PART  NUMBER:  36V73A14-S8 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE: 

LOSS  OF  ALL  REDUNDANCY  IS  POSSIBLE  LOSS  OF  MISSION  DUE  TO  LOSS  OF 
INTERCONNECT/XFEED  CAPABILITY,  LOSS  OF  ENGINE  REDUNDANCY,  LOSS  OF 
PROTECTION  AGAINST  SUBSEQUENT  ENGINE  OR  PROP  FAILURES,  AND  LOSS 
OF  CAPABILITY  TO  BALANCE  PROP  WEIGHTS  BETWEEN  PODS  IF  PREVIOUS 
FAILURE  REQUIRES  SUCH  ACTION. 


REFERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85;  MF0004-400  REV  C 


REPORT  DATE  02/04/87 


C~951 


INDEPENDENT  ORBITER  ASSESSMENT 
ORBITER  SUBSYSTEM  ANALYSIS  WORKSHEET 


DATE:  1/05/87 

SUBSYSTEM:  OMS 

MDAC  ID:  1050 


HIGHEST  CRITICALITY 
FLIGHT: 
ABORT: 


HDW/FUNC 

3/2R 

3/3 


ITEM: 

FAILURE  MODE: 


SWITCH  TOGGLE,  OMS  XFEED  LINES  B AUTO  (S8) 
FAILS  TO  SWITCH  (STUCK  IN  AUTO  POSITION) 


LEAD  ANALYST;  V.J.  BURKEMPER  SUBSYS  LEAD;  D.J.  PAUL 


BREAKDOWN  HIERARCHY: 

1)  ELECTRICAL  COMPONENTS 
2}  CROSSFEED 

3)  THERMAL  CONTROL  SUBSYSTEM 

4)  SWITCH  TOGGLE,  OMS  XFEED  LINES  B AUTO  (S8) 

5) 

6) 

7) 

8) 

9) 


FLIGHT  PHASE 
PRELAUNCH: 
LIFTOFF: 
ONORBIT; 
DEORBIT: 
LANDING/ SAFING ; 

REDUNDANCY  SCREENS; 


CRITICALITIES 

HDW/FUNC  ABORT  HDW/FUNC 


3/3 

RTLS: 

3/3 

3/3 

TAL: 

3/3 

3/3 

AOA: 

3/3 

3/3 

3/3 

ATO: 

3/3 

A [ 2 ] 

B [ P ] 

C [ P ] 

LOCATION:  PNL  14 

PART  NUMBER:  36V73A14-S8 


CAUSES:  CONTAMINATION,  VIBRATION,  PIECE  PART  FAILURE,  OVERLOAD 


EFFECTS/RATIONALE : 

LOSE  ABILITY  TO  TURN  OFF  "A"  XFEED  HTR  SYSTEM.  CONTROL 

MAINTAIN  PROPER  THERMAL  ENVIRONMENT.  SECOND 
REDUNDANT  SYSTEM  RESULTS  IN  BOTH  "A«  & "B"  XFEED  HTR 
SYSTEMS  STUCK  IN  AUTO  MODE. 

SECOND  FAILURE  IN  THE  SAME  SYSTEM  (OVERTEMP  THERMOSTAT)  WILL 

associated  HTR  GRoSTorB;  wS  OF 

ALL  REDUNDANCY  RESULTS  IN  BOTH  ELEMENTS  OF  ONE  OR  MORE  HTR'S 

COULD  RESULT  IN  LOSS  OF  MISSION  FOR  SAFETY 
(OVER  TEMP  OF  CROSSFEED  LNS).  (ONE  HTR  ELEMENT  FAILED 
ON  CONTINUOUSLY  CAN  HAVE  A SURFACE  TEMP  AS  HIGH  AS  352  F.) 


R^ERENCES:  VS70-943099  REV  A EO  B12;  JSC  18549,  OCT  82,  LTR 

JUNE  85;  MF004-400  REV  C 


REPORT  DATE  02/04/87 


C-952 


APPENDIX  D 

POTENTIAL  CRITICAL  ITEMS 


MDAC 

ID 

ITEM 

FAILURE  MODE 

100 

TANK,  HELIUM  STORAGE 

RUPTURE 

101 

TANK,  HELIUM  STORAGE 

EXTERNAL  LEAKAGE 

102 

COUPLING,  HELIUM  FILL 

EXTERNAL  LEAKAGE 

105 

LINES  AND  MECHANICAL  FITTINGS 

STRUCTURAL  FAILURE, 

106 

HELIUM  PRESSURE 

LINES  AND  MECHANICAL  FITTINGS 

RUPTURE,  EXTERNAL  LEAKAGE 
RESTRICTED  FLOW,  BLOCKAGE 

107 

HELIUM  PRESSURE 
VALVE,  HELIUM  ISOLATION 

FAILS  TO  OPEN,  FAILS  TO 

108 

VALVE,  HELIUM  ISOLATION 

REMAIN  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 

109 

VALVE,  HELIUM  ISOLATION 

REMAIN  CLOSED 
INTERNAL  LEAKAGE 

110 

VALVE,  HELIUM  ISOLATION 

EXTERNAL  LEAKAGE 

111 

VALVE,  HELIUM  ISOLATION 

RESTRICTED  FLOW 

116 

LINES  AND  MECHANICAL  FITTINGS 

STRUCTURAL  FAILURE, 

117 

HELIUM  PRESSURE 

LINES  AND  MECHANICAL  FITTINGS 

RUPTURE,  EXTERNAL  LEAKAGE 
RESTRICTED  FLOW,  BLOCKAGE 

118 

HELIUM  PRESSURE 
REGULATOR  ASSY,  HELIUM 

FAILS  TO  REGULATE, 

119 

PRESSURE 

REGULATOR  ASSEMBLY,  HELIUM 

INTERNAL  LEAKAGE , HIGH 
OUTPUT,  FAILS  TO  LOCKUP, 
FAILS  TO  CLOSE 
FAILS  TO  OPEN 

120 

PRESSURE! 

REGULATOR  ASSEMBLY,  HELIUM 

FAILS  OUT  OF  TOLERANCE, 

121 

PRESSURE 

REGULATOR  ASSEMBLY,  HELIUM 

LOW  OUTPUT,  REGULATES  AT 
LOWER  THAN  NORMAL  PRESSURE 
RESTRICTED  FLOW 

122 

PRESSURE 

REGULATOR  ASSEMBLY,  HELIUM 

EXTERNAL  LEAKAGE 

126 

PRESSURE 

VALVE,  VAPOR  ISOLATION-OXIDIZER 

FAILS  TO  OPEN,  FAILS  TO 

127 

VALVE,  VAPOR  ISOLATION-OXIDIZER 

REMAIN  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 

128 

VALVE,  VAPOR  ISOLATION-OXIDIZER 

REMAIN  CLOSED 

INTERNAL  LEAKAGE,  REVERSE 

129 

VALVE,  VAPOR  ISOLATION-OXIDIZER 

FLOW 

EXTERNAL  LEAKAGE 

130 

VALVE,  VAPOR  ISOLATION-OXIDIZER 

RESTRICTED  FLOW 

132 

VALVE,  QUAD  CHECK  VALVES 

FAILS  TO  OPEN 

133 

VALVE,  QUAD  CHECK  VALVES,  FUEL 

FAILS  TO  CLOSE,  INTERNAL 

134 

VALVE,  QUAD  CHECK  VALVES, 

LEAKAGE,  REVERSE  FLOW 
FAILS  TO  CLOSE,  INTERNAL 

135 

OXIDIZER 

VALVE,  QUAD  CHECK  VALVES 

LEAKAGE,  REVERSE  FLOW 
STRUCTURAL  FAILURE, 

136 

VALVE,  QUAD  CHECK  VALVES 

RUPTURE,  EXTERNAL  LEAKAGE 
RESTRICTED  FLOW 

D-1 


MDAC 

ID  item  failure  mode 

141  VALVE- PRESSURE  RELIEF  ASSEMBLY  FAILS  OUT  OF  TOLERANCE, 

FAILS  TO  OPEN,  BURST  DISK 
FAILS  TO  RUPTURE,  RELIEF 
VALVE  FAILS  TO  OPEN 

142  VALVE- PRESSURE  RELIEF  ASSEMBLY  FAILS  OUT  OF  TOLERANCE, 

BURST  DISK  RUPTURES  AT 
LOWER  THAN  BURST  PRESSURE 

143  VALVE-PRESSURE  RELIEF  ASSEMBLY  BURST  DISK  LEAK,  INTERNAL 

LEAKAGE 

144  VALVE- PRESSURE  RELIEF  ASSEMBLY  FAILS  TO  CLOSE,  RELIEF 

VALVE  FAILS  TO  RESEAT 
(OPENS  AFTER  BURST  DISK 
RUPTURE ) 

145  VALVE- PRESSURE  RELIEF  ASSEMBLY  EXTERNAL  LEAKAGE 

149  PROPELLANT  LINES  AND  MECHANICAL  RESTRICTED  FLOW,  BLOCKAGE 
FITTINGS-MMH  AND  NTO 

150  COUPLING- TEST  PORT,  PROPELLANT  EXTERNAL  LEAKAGE 

PRESSURE  CHECK 

153  VALVE-GROUND,  MANUAL  ISOLATION  FAILS  TO  REMAIN  OPEN 

155  VALVE-GROUND,  MANUAL  ISOLATION  EXTERNAL  LEAKAGE 

156  COUPLING- TANK  VENT  EXTERNAL  LEAKAGE 

159  PROPELLANT  LINES  AND  MECHANICAL  RESTRICTED  FLOW,  BLOCKAGE 
FITTINGS-MMH  AND  NTO 

160  GIMBAL  BELLOWS  STRUCTURAL  FAILURE, 

RUPTURE,  EXTERNAL  LEAKAGE 

161  GIMBAL  BELLOWS  FAILS  OUT  OF  TOLERANCE, 


PHYSICAL  BINDING/ JAMMING, 
NO  BELLOWS  ANGULAR 
DEFLECTION 


162 

GIMBAL  BELLOWS 

RESTRICTED  FLOW 

163 

PROPELLANT  TANK 

RUPTURE 

164 

PROPELLANT  TANK 

STRUCTURAL  FAILURE, 
EXTERNAL  LEAKAGE 

165 

COUPLING-PROP  TANK,  HORIZONTAL 
DRAIN  PORT 

EXTERNAL  LEAKAGE 

168 

COUPLING-TANK  ACQ.  SYSTEM  TRAP 
FILL /VENT  PORT 

EXTERNAL  LEAKAGE 

171 

COUPLING-TANK  ACQ,  SYSTEM 
FILL/VENT  PORT 

EXTERNAL  LEAKAGE 

174 

COUPLING- PROPELLANT,  TANK 
TEST  PORT 

EXTERNAL  LEAKAGE 

190 

COMMUNICATION  SCREEN 

STRUCTURAL  FAILURE,  LOSS 
OF  RETENTION  CAPABILITY 

191 

COMMUNICATION  SCREEN 

STRUCTURAL  FAILURE, 
HELIUM  PASSAGE 

192 

GALLERY  LEGS 

STRUCTURAL  FAILURE, 
PASSAGE 

HELIUM 

193 

COLLECTOR  MANIFOLD 

STRUCTURAL  FAILURE, 
PASSAGE 

HELIUM 

194 

PROPELLANT  LINES  AND  MECHANICAL 

STRUCTURAL  FAILURE, 

FITTINGS-MMH  AND  NTO 

RUPTURE,  EXTERNAL  LEAKAGE 

D-2 


MDAC 

ID  ITEM 


FAILURE  MODE 


195 

196 


197 

198 

200 

202 

203 

205 


206 

207 


GIMBAL  BELLOWS 
GIMBAL  BELLOWS 


GIMBAL  BELLOWS 
VALVE- PROPELLANT 

VALVE- PROPELLANT 

VALVE-PROPELLANT 
VALVE- PROPELLANT 
VALVE-PROPELLANT 


PROPELLANT  LINES 
FITTINGS -MMH  AND 


TANK  ISOLATION 

TANK  ISOLATION 

TANK  ISOLATION 
TANK  ISOLATION 
TANK  ISOLATION 


AND  MECHANICAL 
NTO 


COUPLING-PROPELLANT  LOW  POINT 


STRUCTURAL  FAILURE, 
RUPTURE,  EXTERNAL  LEAKAGE 
FAILS  OUT  OF  TOLERANCE, 
PHYSICAL  BINDING/ JAMMING, 
NO  BELLOWS  ANGULAR 
DEFLECTION 
RESTRICTED  FLOW 
FAILS  TO  OPEN,  FAILS  TO 
REMAIN  OPEN 
FAILS  MID-TRAVEL, 
PARTIALLY  OPEN/CLOSED 
EXTERNAL  LEAKAGE 
RESTRICTED  FLOW 
FAILS  OUT  OF  TOLERANCE, 
RELIEF  VALVE  FAILS  TO 
RELIEVE 

RESTRICTED  FLOW,  BLOCKAGE 
EXTERNAL  LEAKAGE 


DRAIN 

210  COUPLING-OMS/RCS  PROPELLANT 
FILL  PORT 

213  COUPLING- PROPELLANT  GROUND  PURGE 

216  CROSSFEED  GIMBAL  JOINT 

217  CROSSFEED  GIMBAL  JOINT 


218  CROSSFEED  GIMBAL  JOINT 

219  FLEXIBLE  LINE  ASSEMBLY 

220  FLEXIBLE  LINE  ASSEMBLY 

221  CROSSFEED  PROPELLANT  LINES  AND 
MECHANICAL  FITTINGS 

222  CROSSFEED  PROPELLANT  LINES  AND 
MECHANICAL  FITTINGS 

227  VALVE- CROSSFEED 

228  VALVE-CROSSFEED 

230  VALVE-CROSSFEED 


231  COUPLING-HIGH  POINT  BLEED 
234  COUPLING-CROSSFEED  DRAIN 

238  PROPELLANT  LINES  AND  MECHANICAL 
FITTINGS-MMH  AND  NTO 

239  GIMBAL  BELLOWS 

240  GIMBAL  BELLOWS 


EXTERNAL  LEAKAGE 

EXTERNAL  LEAKAGE 
STRUCTURAL  FAILURE, 

RUPTURE , EXTERNAL  LEAKAGE 
FAILS  OUT  OF  TOLERANCE , 
PHYSICAL  BINDING/ JAMMING, 

NO  BELLOWS  ANGULAR 
DEFLECTION 
RESTRICTED  FLOW 
STRUCTURAL  FAILURE, 

RUPTURE,  EXTERNAL  LEAKAGE 
RESTRICTED  FLOW 
RESTRICTED  FLOW,  BLOCKAGE 

RESTRICTED  FLOW,  BLOCKAGE 

EXTERNAL  LEAKAGE 
RESTRICTED  FLOW 
FAILS  OUT  OF  TOLERANCE, 
RELIEF  VALVE  FAILS  TO 
RELIEVE 

EXTERNAL  LEAKAGE 
EXTERNAL  LEAKAGE 
RESTRICTED  FLOW,  BLOCKAGE 

STRUCTURAL  FAILURE, 

RUPTURE,  EXTERNAL  LEAKAGE 
FAILS  OUT  OF  TOLERANCE, 
PHYSICAL  BINDING/ JAMMING,  NO 
BELLOWS  ANGULAR  DEFLECTION 


D-3 


FAILURE  MODE 


MDAC 

ID 

ITEM 

241 

GIMBAL 

BELLOWS 

242 

GIMBAL 

BELLOWS 

243 

GIMBAL 

BELLOWS 

244 

GIMBAL 

BELLOWS 

245  ALIGNMENT  BELLOWS 


246  ALIGNMENT  BELLOWS 


247 

ALIGNMENT  BELLOWS 

248 

ENGINE  INLET  FILTER 

AND 

ORIFICE 

249 

ENGINE  INLET  FILTER 

AND 

ORIFICE 

250 

BELLOWS-TVC  GIMBAL 

251 

BELLOWS-TVC  GIMBAL 

252  BELLOWS -TVC  GIMBAL 

253  COUPLING-HIGH  POINT  BLEED 
TEST  PORT 

256  VALVE  - BIPROPELLANT  VALVE 


257  VALVE  - BIPROPELLANT  VALVE 

258  VALVE  - B I PROPELLANT  VALVE 

259  VALVE  - B I PROPELLANT  VALVE 

260  VALVE  - B I PROPELLANT  VALVE 

261  VALVE  - BIPROPELLANT  VALVE 

262  VALVE  - BIPROP  CAVITY  PRESSURE 
RELIEF 

265  VALVE  - BIPROP  CAVITY  PRESSURE 
RELIEF 

267  COUPLING  - BIPROP  VALVE  DRAIN/ 
PURGE  TEST  PORT 
270  OME  ALIGNMENT  BELLOWS 

272  OME  ALIGNMENT  BELLOWS 

273  COUPLING  - BIPROP  VALVE  DRAIN 
PORT 

276  PROPELLANT  LINES  AND  MECHANICAL 
FITTINGS -MMH  AND  NTO 


RESTRICTED  FLOW 
STRUCTURAL  FAILURE, 
RUPTURE,  EXTERNAL  LEAKAGE 
FAILS  OUT  OF  TOLERANCE, 
PHYSICAL  BINDING/ JAMMING, 
NO  BELLOWS  ANGULAR 
DEFLECTION 
RESTRICTED  FLOW 
STRUCTURAL  FAILURE, 
RUPTURE,  EXTERNAL  LEAKAGE 
FAILS  OUT  OF  TOLERANCE, 
PHYSICAL  BINDING/ JAMMING, 
NO  BELLOWS  ANGULAR 
DEFLECTION 
RESTRICTED  FLOW 
STRUCTURAL  FAILURE, 
CONTAMINATION  PASSAGE 
RESTRICTED  FLOW,  CLOGGED 
STRUCTURAL  FAILURE, 

RUPTURE , EXTERNAL  LEAKAGE 
FAILS  OUT  OF  TOLERANCE, 
PHYSICAL  BINDING/ JAMMING, 
NO  BELLOWS  ANGULAR 
DEFLECTION 
RESTRICTED  FLOW 
EXTERNAL  LEAKAGE 

FAILS  TO  OPEN,  FAILS  TO 
REMAIN  OPEN,  RESTRICTED 
FLOW 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED 

FAILS  MID  TRAVEL,  PARTIALLY 
OPEN/CLOSED 
INTERNAL  LEAKAGE 
STRUCTURAL  FAILURE, 

RUPTURE,  EXTERNAL  LEAKAGE 
DELAYED  OPERATION 
FAILS  TO  OPEN,  FAILS  TO 
OPEN  AT  SPECIFIED  PSID 
STRUCTURAL  FAILURE, 

EXTERNAL  LEAKAGE 
EXTERNAL  LEAKAGE 

STRUCTURAL  FAILURE, 

RUPTURE,  EXTERNAL  LEAKAGE 
RESTRICTED  FLOW 
EXTERNAL  LEAKAGE 

RESTRICTED  FLOW,  BLOCKAGE 


D-4 


MDAC 

ID 


277 

280 

281 

282 

283 

284 

285 


286 

290 

295 

298 

303 

305 

308 

309 

319 

320 

321 

322 

323 

324 

325 

326 

327 

328 

329 

330 

331 

332 

333 

334 


ITEM 

COUPLING-OMS  ENGINE  TRICKLE 
PURGE  PORT 

PLATELET  INJECTOR  ASSEMBLY 

PLATELET  INJECTOR  ASSEMBLY 

PLATELET  INJECTOR  ASSEMBLY 
COMBUSTION  CHAMBER 

COMBUSTION  CHAMBER 

NOZZLE  EXTENSION 


NOZZLE  EXTENSION 

GN2  PRESSURE  LINES  AND 

MECHANICAL  FITTINGS 

TANK-GN2  STORAGE 

PNEUMATIC  PACK  HOUSING  ASSEMBLY 

VALVE-GN2  PRESSURE  ISOLATION 

GN2  PRESSURE  REGULATOR 

GN2  PRESSURE  REGULATOR 

GN2  PRESSURE  REGULATOR 
CHECK  VALVE-GN2 
CHECK  VALVE-GN2 

CHECK  VALVE-GN2 
GN2  ACCUMULATOR 
GN2  ACCUMULATOR 

GN2  PRESSURE  LINES  AND 
MECHANICAL  FITTINGS 
GN2  PRESSURE  LINES  AND 
MECHANICAL  FITTINGS 
VALVE-ENGINE  CONTROL 

VALVE-ENGINE  CONTROL 

VALVE-ENGINE  CONTROL 
VALVE-ENGINE  CONTROL 
VALVE-ENGINE  CONTROL 
VALVE-ENGINE  CONTROL 
ORIFICE-ENGINE  CONTROL  VALVE 
INLET 

ORIFICE-ENGINE  CONTROL  VALVE 
VENT 

CHECK  VALVE-ENGINE  CONTROL 
VALVE  VENT 


FAILURE  MODE 

EXTERNAL  LEAKAGE 

STRUCTURAL  FAILURE,  BURN 
THROUGH 

STRUCTURAL  FAILURE, 

INTERNAL  LEAKAGE 
RESTRICTED  FLOW,  CLOGGED 
STRUCTURAL  FAILURE , BURN 
THROUGH 

STRUCTURAL  FAILURE, 

FRACTURE 

STRUCTURAL  FAILURE , BURN 
THROUGH,  FRACTURE, 
DEFORMATION , FLANGE  LEAKAGE 
STRUCTURAL  FAILURE, 

BUCKLING  (DURING  ASCENT) 
STRUCTURAL  FAILURE, 

RUPTURE,  EXTERNAL  LEAKAGE 
RUPTURE 

RESTRICTED  FLOW,  BLOCKAGE 

RESTRICTED  FLOW 

FAILS  TO  OPEN 

FAILS  OUT  OF  TOLERANCE, 

REGULATES  AT  LOW  PRESSURE 

RESTRICTED  FLOW 

FAILS  TO  OPEN 

FAILS  TO  CLOSE,  VALVE 

FAILS  TO  RESEAT 

INTERNAL  LEAKAGE 

RUPTURE 

STRUCTURAL  FAILURE, 
EXTERNAL  LEAKAGE 
STRUCTURAL  FAILURE, 
RUPTURE,  EXTERNAL  LEAKAGE 
RESTRICTED  FLOW,  BLOCKAGE 

FAILS  TO  OPEN,  FAILS  TO 
REMAIN  OPEN 

FAILS  TO  CLOSE,  FAILS  TO 
REMAIN  CLOSED 
INTERNAL  LEAKAGE 
EXTERNAL  LEAKAGE 
RESTRICTED  FLOW 
DELAYED  OPERATION 
RESTRICTED  FLOW 

RESTRICTED  FLOW,  INABILITY 
TO  VENT  GN2  TO  AMBIENT. 
FAILS  TO  OPEN 


D-5 


MDAC 

ID 


ITEM 


FAILURE  MODE 


335  CHECK  VALVE-ENGINE  CONTROL 
VALVE  VENT 

336  CHECK  VALVE-ENGINE  CONTROL 
VALVE  VENT 

337  PNEUMATIC  ACTUATOR 


338  PNEUMATIC  ACTUATOR 

339  PNEUMATIC  ACTUATOR 


340  PNEUMATIC  ACTUATOR 

341  PNEUMAT I C ACTUATOR 

343  PNEUMATIC  ACTUATOR 

344  PNEUMATIC  ACTUATOR 

348  PINION  GEAR  AND  DRIVE  ASSEMBLY 

349  PINION  GEAR  AND  DRIVE  ASSEMBLY 

353  VALVE-GN2  PURGE 

358  CHECK  VALVE-GN2  PURGE 

359  CHECK  VALVE-GN2  PURGE 

362  GIMBAL  RING 

363  BEARING-GIMBAL  RING 

364  GIMBAL  RING  MOUNTING  PAD 
367  ACME  SCREW/NUT  TUBE 


368  ACME  SCREW/NUT  TUBE 
373  ANTI -BACK  DEVICE 

376  BEARING-SPHERICAL  ROD  END 

377  BEARING-SPHERICAL  ROD  END 

378  MECHANICAL  STOP-SNUBBER 
381  OUTPUT  SHAFT 


399  CONTROLLER,  REMOTE  POWER 

410  DIODE 

411  DIODE 

416  DIODE 

417  DIODE 


FAILS  TO  CLOSE 

INTERNAL  LEAKAGE 

FAILS  TO  OPEN,  FAILS  TO 
OPERATE,  PHYSICAL 
BINDING/ JAMMING 
FAILS  TO  CLOSE,  PHYSICAL 
BINDING/ JAMMING 
FAILS  MID-TRAVEL, 
PARTIALLY  OPEN/CLOSED, 
PHYSICAL  BINDING/JAMMING 
INTERNAL  LEAKAGE,  PISTON 
SEAL  LEAKAGE 
RUPTURE 

EXTERNAL  LEAKAGE  ( GN2 ) 
DELAYED  OPERATION 
FAILS  TO  OPERATE, 
PHYSICAL  BINDING/JAMMING 
STRUCTURAL  FAILURE, 
FRACTURE 

INTERNAL  LEAKAGE 
FAILS  TO  CLOSE 
INTERNAL  LEAKAGE 
STRUCTURAL  FAILURE 
FAILS  TO  FUNCTION, 
PHYSICAL  BINDING/ JAMMING 
STRUCTURAL  FAILURE, 
FRACTURE 

FAILS  TO  OPERATE, 

PHYSICAL  BINDING/JAMMING 
BETWEEN  ACME  SCREW  AND 
NUT  TUBE 

STRUCTURAL  FAILURE, 
FRACTURE 

STRUCTURAL  FAILURE, 
FRACTURE 

PHYSICAL  BINDING/ JAMMING 
STRUCTURAL  FAILURE, 
FRACTURE 

STRUCTURAL  FAILURE,  FAILS 
OUT  OF  TOLERANCE 
STRUCTURAL  FAILURE, 
FRACTURE,  DIS ATTACHMENT 
OF  ACTUATOR  TO  ENGINE 
FAILS  HIGH 
FAILS  OPEN 
FAILS  SHORT 
FAILS  OPEN  (LOSS  OF 
OUTPUT ) 

FAILS  SHORT 


D-6 


MDAC 

ID  ITEM 


FAILURE  MODE 


418  DIODE 

419  DIODE 

439  SWITCH  TOGGLE,  LT/RT  OMS  HE 
PRESS  VAPOR  I SOL  VLV  A 

440  SWITCH  TOGGLE,  LT/RT  OMS  HE 
PRESS  VAPOR  ISOL  VLV  A 

441  SWITCH  TOGGLE,  LT/RT  OMS  HE 
PRESS  VAPOR  ISOL  VLV  B 

443  SWITCH  TOGGLE,  LT/RT  OMS  HE 
PRESS  VAPOR  ISOL  VLV  B 


450 

DIODE 

451 

DIODE 

452 

DIODE 

453 

DIODE 

454 

DIODE 

455 

DIODE 

456 

DIODE 

457 

DIODE 

482 

RELAY 

484 

RELAY 

486 

RELAY 

488 

RELAY 

492 

RELAY 

496 

RELAY 

498 

RELAY 

500 

RELAY 

502 

RELAY 

504 

RELAY 

508 

RELAY 

513 

RELAY 

514 

RESISTOR,  1.2K 

1/4W 

517 

RESISTOR,  12K 

1/4W 

518 

RESISTOR,  5. IK 

1/4W 

520 

RESISTOR,  1.2K 

1/4W 

523 

RESISTOR,  12K 

1/4W 

524 

RESISTOR,  5. IK 

1/4W 

526 

RESISTOR,  1.2K 

2W 

528 

RESISTOR,  12K 

1/4W 

530 

RESISTOR,  5. IK 

1/4W 

FAILS  OPEN  (LOSS  OF 
OUTPUT ) 

FAILS  SHORT 

FAILS  TO  SWITCH  (STUCK  IN 
THE  CLOSE  POSITION) 

FAILS  TO  SWITCH  (STUCK  IN 
THE  GPC  POSITION) 

FAILS  TO  SWITCH  (STUCK  IN 
THE  CLOSE  POSITION) 

FAILS  TO  SWITCH  (STUCK  IN 
THE  GPC  POSITION) 

FAILS  OPEN 

FAILS  SHORT 

FAILS  OPEN 

FAILS  SHORT 

FAILS  OPEN 

FAILS  SHORT 

FAILS  OPEN 

FAILS  SHORT 

FAILS  OPEN  (FAILS  TO 

ENERGIZE) 

FAILS  OPEN 

FAILS  OPEN  (FAILS  TO 

ENERGIZE) 

FAILS  OPEN  (FAILS  TO 
ENERGIZE) 

FAILS  OPEN  (RELAY  FAILS 
TO  ENERGIZE) 

FAILS  OPEN  (RELAY  FAILS 
TO  ENERGIZE) 

FAILS  OPEN  (FAILS  TO 
ENERGIZE) 

FAILS  OPEN  (FAILS  TO 
ENERGIZE) 

FAILS  OPEN  (FAILS  TO 
ENERGIZE) 

FAILS  OPEN  (FAILS  TO 
ENERGIZE) 

FAILS  OPEN  (RELAY  FAILS 
TO  ENERGIZE) 

FAILS  OPEN  (RELAY  FAILS 
TO  ENERGIZE) 

FAILS  OPEN 
FAILS  SHORT 
FAILS  OPEN 
FAILS  OPEN 
FAILS  SHORT 
FAILS  OPEN 
FAILS  OPEN 
FAILS  SHORT 
FAILS  OPEN 
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ID 

ITEM 

532 

RESISTOR,  1.2K  2W 

535 

RESISTOR,  12K  1/4W 

537 

RESISTOR,  5. IK  1/4W 

538 

RESISTOR,  1.2K  1/4W 

544 

RESISTOR,  1.2K  1/4W 

558 

RESISTOR,  1.2K  1/4W 

561 

RESISTOR,  12K  1/4W 

562 

RESISTOR,  5. IK  1/4W 

564 

RESISTOR,  1.2K  1/4W 

567 

RESISTOR,  12K  1/4W 

568 

RESISTOR,  5. IK  1/4W 

570 

RESISTOR,  1.2K  2W 

572 

RESISTOR,  1.2K  2W 

575 

RESISTOR,  12K  1/4W 

576 

RESISTOR,  5. IK  1/4W 

578 

RESISTOR,  1.2K  1/4W 

580 

RESISTOR,  1.2K  2W 

583 

RESISTOR,  12K  1/4W 

584 

RESISTOR,  5. IK  1/4W 

594 

SWITCH  TOGGLE  LT/RT 

595 

SWITCH  TOGGLE  LT/RT 

610 

SENSOR  TEMPERATURE , FUEL 

611 

TANK  LOWER 

SENSOR  TEMPERATURE,  OX 

622 

LOWER  TANK 
DRIVER,  HYBRID 

624 

DRIVER,  HYBRID 

626 

DRIVER,  HYBRID 

628 

DRIVER,  HYBRID 

630 

DRIVER,  HYBRID 

631 

DRIVER,  HYBRID 

632 

DRIVER,  HYBRID 

633 

DRIVER,  HYBRID 

634 

DRIVER,  HYBRID 

636 

DRIVER,  HYBRID 

638 

DRIVER,  HYBRID 

639 

DRIVER,  HYBRID 

640 

DRIVER,  HYBRID 

641 

DRIVER,  HYBRID 

644 

FUSE,  lA 

645 

FUSE,  lA 

646 

FUSE,  lA 

647 

FUSE,  lA 

648 

FUSE,  3A 

649 

FUSE,  3A 

650 

FUSE,  3A 

651 

FUSE,  3A 

FAILURE  MODE 

FAILS  OPEN 
FAILS  SHORT 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  SHORT 
FAILS  OPEN 
FAILS  OPEN 
FAILS  SHORT 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  SHORT 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  SHORT 
FAILS  OPEN 

FAILS  TO  SWITCH  (STUCK  IN 
CLOSE  POSITION) 

FAILS  TO  SWITCH  (STUCK  IN 
GPL  POSITION) 

ERRONEOUS  OUTPUT  (SHORTED, 
OPENED,  FAILS-OUT-OF- 
TOLERANCE ) 

ERRONEOUS  OUTPUT  (SHORTED, 
OPENED,  FAILES-OUT-OF- 
TOLERANCE ) 

FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
PAILS  HIGH 
FAILS  OPEN 
PAILS  HIGH 
PAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  HIGH 
FAILS  OPEN 
FAILS  HIGH 
PAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 


D-8 


MDAC 

ID 


661 

662 

664 

666 

667 

670 

672 

673 

674 

675 

676 
689 


698 


706 

708 

710 

712 

714 

715 
718 
720 
722 
724 
726 
728 
730 
732 
734 
736 
738 
740 
742 
744 

746 

747 
782 

773 


784 


ITEM 

RESISTOR,  5. IK  1/4W 

RESISTOR,  5. IK  1/4W 

RESISTOR,  5. IK  1/4W 

RESISTOR,  5. IK  1/4W 

RESISTOR,  5. IK  1/4W 

RESISTOR,  5. IK  1/4W 

SWITCH,  OMS  LT/RT  ENG  ARM/PRESS 

(C3A1,  S1/S2) 

SWITCH,  OMS  LT/RT  ENG  ARM/PRESS 
(C3A1,  S1/S2) 

SWITCH,  OMS  LT/RT  ENG  ARM/PRESS 
(C3A1,  S1/S2) 

SWITCH,  OMS  LT/RT  ENG  CONTROL 
VLV 

SWITCH,  OMS  LT/RT  ENG  CONTROL 
VLV 

SENSOR  PRESSURE,  OMS  ENGINE 
REG  OUT 

SENSOR  TEMPERATURE  ENGINE 
FUEL  FEED  LINE 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

DRIVER,  HYBRID 

HEATER,  LT/RT  ENG  SERV  PNL 

GROUP  1 

HEATER,  LT/RT  ENG  SERV  PNL 
GROUP  1 

HEATER,  LT/RT  ENG  SERV  PNL 
GROUP  2 


FAILURE  MODE 

FAILS  SHORT 
FAILS  OPEN 
FAILS  OPEN 
FAILS  SHORT 
FAILS  OPEN 
FAILS  OPEN 

FAILS  TO  SWITCH  (STUCK  IN 
ARM/PRESS  POSITION) 

FAILS  TO  SWITCH  (STUCK  IN 
ARM  POSITION) 

FAILS  TO  SWITCH  (STUCK  IN 
OFF  POSITION) 

FAILS  TO  SWITCH  (STUCK  IN 
OFF  POSITION) 

FAILS  TO  SWITCH  (STUCK  IN 
ON  POSITION) 

ERRONEOUS  OUTPUT  (OPEN, 
SHORTED,  FAILS  OUT  OF 
TOLERANCE) 

ERRONEOUS  OUTPUT  (SHORTED, 
OPENED,  FAILS-OUT-OF- 
TOLERANCE ) 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  HIGH 

FAILS  OPEN,  FAILS  TO 

PROVIDE  HEAT 

FAILS  SHORT,  SHORTS  TO 

MOUNTING  RESULTING  IN  OPEN 

CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 


D-9 


MDAC 

ID  ITEM 

785  HEATER,  LT/RT  ENG  SERV  PNL 
GROUP  2 

786  HEATER,  LT/RT  GSE  SERVICE  PNL 
GROUP  1 

787  HEATER,  LT/RT  GSE  SERVICE  PNL 
GROUP  1 

788  HEATER,  LT/RT  GSE  SERVICE  PNL 
GROUP  2 

789  HEATER,  LT/RT  GSE  SERVICE  PNL 
GROUP  2 

790  HEATER,  LT/RT  LOWER  INBD  Y WEB 
GROUP  1 

791  HEATER,  LT/RT  LOWER  INBD  Y WEB 
GROUP  1 


792  HEATER,  LT/RT  LOWER  INBD  Y WEB 
GROUP  2 

793  HEATER,  LT/RT  LOWER  INBD  Y WEB 
GROUP  2 

794  HEATER,  LT/RT  OME  COMPT  GROUP  1 

795  HEATER,  LT/RT  OME  COMPT  GROUP  1 


797  HEATER,  LT/RT  OME  COMPT  GROUP  2 


806  HEATER,  LT/RT  OMS  KEEL  WEB 
GROUP  1 

807  HEATER,  LT/RT  OMS  KEEL  WEB 
GROUP  1 

808  HEATER,  LT/RT  OMS  KEEL  WEB 
GROUP  2 

809  HEATER,  LT/RT  OMS  KEEL  WEB 
GROUP  2 

815  HEATER,  LT/RT  OX  PRESS  PNL 
GROUP  1 

817  HEATER,  LT/RT  OX  PRESS  PNL 
GROUP  2 

818  HEATER,  LT/RT  RCS  HOUSING 
DRAIN  PNL  GROUP  1 


FAILURE  MODE 

FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  PAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
PAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
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MDAC 

ID  ITEM 


819  HEATER,  LT/RT  RCS  HOUSING 
DRAIN  PNL  GROUP  1 

820  HEATER,  LT/RT  RCS  HOUSING 
DRAIN  PNL  GROUP  2 

821  HEATER,  LT/RT  RCS  HOUSING 
DRAIN  PNL  GROUP  2 

822  HEATER,  LT/RT  RCS  HOUSING 
PITCH  DN  GROUP  1 

823  HEATER,  LT/RT  RCS  HOUSING 
PITCH  DN  GROUP  1 

824  HEATER,  LT/RT  RCS  HOUSING 
PITCH  DN  GROUP  2 

825  HEATER,  LT/RT  RCS  HOUSING 
PITCH  DN  GROUP  2 

826  HEATER,  LT/RT  RCS  HOUSING 
PITCH  UP  GROUP  1 

827  HEATER,  LT/RT  RCS  HOUSING 
PITCH  UP  GROUP  1 

828  HEATER,  LT/RT  RCS  HOUSING 
PITCH  UP  GROUP  2 

829  HEATER,  LT/RT  RCS  HOUSING 
PITCH  UP  GROUP  2 

830  HEATER,  LT/RT  RCS  HOUSING 
VERNIER  GROUP  1 

831  HEATER,  LT/RT  RCS  HOUSING 
VERNIER  GROUP  1 

832  HEATER,  LT/RT  RCS  HOUSING 
VERNIER  GROUP  2 

833  HEATER,  LT/RT  RCS  HOUSING 
VERNIER  GROUP  2 

834  HEATER,  LT/RT  RCS  HOUSING  YAW 
GROUP  1 

835  HEATER,  LT/RT  RCS  HOUSING  YAW 
GROUP  1 

836  HEATER,  LT/RT  RCS  HOUSING  YAW 
GROUP  2 

837  HEATER,  LT/RT  RCS  HOUSING  YAW 
GROUP  2 

846  RELAY 

848  RELAY 


FAILURE  MODE 

FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
mounting  resulting  in  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  OPEN,  FAILS  TO 
PROVIDE  HEAT 
FAILS  SHORT,  SHORTS  TO 
MOUNTING  RESULTING  IN  OPEN 
CIRCUIT 

FAILS  HIGH  (ENERGIZED 
POSITION) 

FAILS  HIGH 
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ID 

ITEM 

FAILURE  MODE 

850 

RELAY 

FAILS  HIGH  (FAILS 

852 

RELAY 

ENERGIZED) 
FAILS  HIGH 

895 

THERMAL  SWITCH,  LT/RT  GSE 
SERVICE  PNL  GROUP  1 

FAILS  SHORT 

897 

THERMAL  SWITCH,  LT/RT  GSE 
SERVICE  PNL  GROUP  2 

FAILS  SHORT 

899 

THERMAL  SWITCH,  LT/RT  KEEL 
WEB  HEATER  SYSTEM  GROUP  1 

FAILS  SHORT 

901 

THERMAL  SWITCH,  LT/RT  KEEL 
WEB  HEATER  SYSTEM  GROUP  2 

FAILS  SHORT 

903 

THERMAL  SWITCH,  LT/RT  LOWER 
INBOARD  Y WEB  GROUP  1 

FAILS  SHORT 

905 

THERMAL  SWITCH,  LT/RT  LOWER 
INBOARD  Y WEB  GROUP  2 

FAILS  SHORT 

907 

THERMAL  SWITCH,  LT/RT  OME 
COMPT  GROUP  1 

FAILS  SHORT 

907 

THERMAL  SWITCH,  LT/RT  OME 
COMPT  GROUP  2 

FAILS  SHORT 

911 

THERMAL  SWITCH,  LT/RT  OME 
COVER  GROUP  1 

FAILS  SHORT 

913 

THERMAL  SWITCH,  LT/RT  OME 
COVER  GROUP  2 

FAILS  SHORT 

915 

THERMAL  SWITCH,  LT/RT  RCS 
HOUSING  GROUP  1 

FAILS  SHORT 

917 

THERMAL  SWITCH,  LT/RT  RCS 
HOUSING  GROUP  2 

FAILS  SHORT 

919 

THERMAL  SWITCH,  LT/RT  UPPER 
INBOARD  Y-WEB  GROUP  1 

FAILS  SHORT 

921 

THERMAL  SWITCH,  LT/RT  UPPER 
INBOARD  Y-WEB  GROUP  2 

FAILS  SHORT 

923 

THERMAL  SWITCH,  LT/RT  UPPER 
OUTBOARD  Y WEB  GROUP  1 

FAILS  SHORT 

925 

926 

927 

THERMAL  SWITCH,  LT/RT  UPPER 
OUTBOARD  Y WEB  GROUP  2 

FAILS  SHORT 

SWITCH,  TOGGLE  RCS/OMS  HEATER 
LT/RT  POD  GROUP  1 
SWITCH,  TOGGLE  RCS/OMS  HEATER 
LT/RT  POD  GROUP  2 

FAILS  TO  SWITCH 
ON  POSITION) 
PAILS  TO  SWITCH 
ON  POSITION) 
FAILS  OPEN 

(STUCK  IN 
(STUCK  IN 

952 

FUEL  AND  OXIDIZER  LOWER  CENTER 
PEED  LINE  (XFEED)  HEATER  ELEMENT 
(A/B) 

953 

954 

FUEL  AND  OXIDIZER  LOWER  CENTER 
PEED  LINE  (XFEED)  HEATER  ELEMENT 
(A/B) 

FAILS  SHORT 

FUEL  AND  OXIDIZER  LOWER  LEFT 
FEED  LINE  (XFEED)  HEATER  ELEMENT 
(A/B) 

FAILS  OPEN 

955 

FUEL  AND  OXIDIZER  LOWER  LEFT 
FEED  LINE  (XFEED)  HEATER  ELEMEITT 
(A/B) 

PAILS  SHORT 

D-12 
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ID 

956 

957 

964 

965 

972 

973 

976 

994 

997 

998 
1001 
1002 

1003 

1004 

1005 

1006 

1007 

1008 
1010 
1011 
1012 
1015 


ITEM 

FUEL  AND  OXIDIZER  LOWER  RIGHT 
FEED  LINE  (XFEED)  HEATER  ELEMENT 
(A/B) 

FUEL  AND  OXIDIZER  LOWER  RIGHT 
FEED  LINE  (XFEED)  HEATER  ELEMENT 
(A/B) 

LEFT  FUEL  AND  OXIDIZER  FLEX 
LINE  HEATER  ELEMENTS  (A/B) 

LEFT  FUEL  AND  OXIDIZER  FLEX 
LINE  HEATER  ELEMENTS  (A/B) 

RIGHT  FUEL  AND  OXIDIZER  FLEX 
LINE  HEATER  ELEMENTS  (A/B) 

RIGHT  FUEL  AND  OXIDIZER  FLEX 
LINE  HEATER  ELEMENTS  (A/B) 

RELAY 

CENTER  - AFT  FUSLG  OXIDIZER 
XFEED  LINE  TEMP  SENSOR 

LEFT  - AFT  FUSLG  OXIDIZER 
XFEED  LINE  TEMP  SENSOR 

LEFT  AFT  OXIDIZER  XFEED  LINE 
TEMP  SENSOR 

RIGHT  - AFT  FUSLG  OXIDIZER 
XFEED  LINE  TEMP  SENSOR 

RIGHT  AFT  OXIDIZER  XFEED  LINE 
TEMP  SENSOR 

FUEL  & OXIDIZER  FLEX  LINE  OVER 
TEMP  (LT  DECK) 

FUEL  & OXIDIZER  FLEX  LINE  OVER 
TEMP  (LT  DECK) 

FUEL  St  OXIDIZER  FLEX  LINE  OVER 
TEMP  (RT  DECK) 

FUEL  St  OXIDIZER  FLEX  LINE  OVER 
TEMP  (RT  DECK) 

FUEL  St  OXIDIZER  LOWER  CENTER 

FEED  LINE  OVER  TEMP 

FUEL  Si  oxidizer  LOWER  CENTER 

FEED  LINE  OVER  TEMP 

FUEL  St  OX  LOWER  CENTER  XFEED 

LINE  CONTROL  TEMP 

FUEL  St  OXIDIZER  LOWER  LEFT 

FEED  LINE  OVER  TEMP 

FUEL  St  OXIDIZER  LOWER  LEFT 

FEED  LINE  OVER  TEMP 

FUEL  St  OXIDIZER  LOWER  RIGHT 

FEED  LINE  OVER  TEMP 


FAILURE  MODE 
FAILS  OPEN 


FAILS  SHORT 


FAILS  OPEN 
FAILS  OPEN 
FAILS  OPEN 
FAILS  SHORT 
FAILS  HIGH 

ERRONEOUS  OUTPUT  (SHORTED, 
OPEN,  FAILS-OUT-OF- 
TOLERANCE ) 

ERRONEOUS  OUTPUT  (SHORTED, 
OPEN,  FAILS-OUT-OF- 
TOLERANCE ) 

ERROENOUS  OUTPUT  (SHORTED, 
OPEN,  FAILS-OUT-OF- 
TOLERANCE ) 

ERROENOUS  OUTPUT  (SHORTED, 
OPEN,  FAILS-OUT-OF- 
TOLERANCE ) 

ERROENOUS  OUTPUT  ( SHORTED , 
OPEN,  FAILS-OUT-OF- 
TOLERANCE ) 

FAILS  OPEN 

FAILS  SHORT 

FAILS  OPEN 

FAILS  SHORT 

FAILS  OPEN 

FAILS  SHORT 

FAILS  SHORT 

FAILS  OPEN 

FAILS  SHORT 

FAILS  OPEN 
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ID 

ITEM 

FAILURE  MODE 

1016 

FUEL  S.  OXIDIZER  LOWER  RIGHT 
FEED  LINE  OVER  TEMP 

FAILS 

SHORT 

1024 

FUEL  HI  PT  BLEED  LINE  OVER  TEMP 

FAILS 

SHORT 

1026 

FUEL  HI  PT  BLEED  LINE  T-4  UMB 
OVER  TEMP 

FAILS 

SHORT 

1030 

L FUEL  & OXIDIZER  LO  PT  BLEED 
LINE  OVER  TEMP 

FAILS 

SHORT 

1038 

OXIDIZER  HI  PT  BLEED  LINE  OVER 
TEMP 

FAILS 

SHORT 

1040 

OXIDIZER  HI  PT  BLEED  LINE  T-4 
UMB  OVER  TEMP 

FAILS 

SHORT 

1044 

R FUEL  Sc  OXIDIZER  LO  PT  BLEED 
LINE  OVER  TEMP 

FAILS 

SHORT 
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